Skip to content

Commit c3b5310

Browse files
Merge pull request #177395 from OWinfreyATL/owinfreyATL-RBAC-UpdateV2
Owinfrey atl rbac update v2
2 parents c4693ad + 27b7f72 commit c3b5310

File tree

2 files changed

+51
-35
lines changed

2 files changed

+51
-35
lines changed

articles/devtest-labs/devtest-lab-add-devtest-user.md

Lines changed: 36 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -50,17 +50,24 @@ Owners and users can be added at the lab level via the Azure portal.
5050
A user can be an external user with a valid [Microsoft account (MSA)](./devtest-lab-faq.yml).
5151
The following steps guide you through the process of adding an owner or user to a lab in Azure DevTest Labs:
5252

53-
1. Sign in to the [Azure portal](https://go.microsoft.com/fwlink/p/?LinkID=525040).
54-
2. Select **All services**, and then select **DevTest Labs** from the list.
55-
3. From the list of labs, select the desired lab.
56-
4. On the lab's blade, select **Configuration and policies**.
57-
5. On the **Configuration and policies** page, select **Access control (IAM)** from the menu on the left.
58-
6. Select **Add role assignment** on the toolbar to add a user to a role.
59-
1. In the **Add permissions** window, do the following actions:
60-
1. Select a role (for example: DevTest Labs User). The section [Actions that can be performed in each role](#actions-that-can-be-performed-in-each-role) lists the various actions that can be performed by users in the Owner, DevTest User, and Contributor roles.
61-
2. Select the user to be added to the role.
62-
3. Select **Save**.
63-
11. When you return to the **Users** blade, the user has been added.
53+
1. Sign in to the [Azure portal](https://portal.azure.com) as [User Access Administrator](../role-based-access-control/built-in-roles.md#user-access-administrator) or [Owner](../role-based-access-control/built-in-roles.md#owner).
54+
55+
1. Open the desired resource group and select **DevTest Labs**.
56+
57+
1. In the navigation menu, select **Access control (IAM)**.
58+
59+
1. Select **Add** > **Add role assignment**.
60+
61+
![Access control (IAM) page with Add role assignment menu open.](../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png)
62+
63+
1. On the **Role** tab, select the **OWNER** or **USER** role.
64+
65+
![Add role assignment page with Role tab selected.](../../includes/role-based-access-control/media/add-role-assignment-role-generic.png)
66+
67+
1. On the **Members** tab, select the user you want to give the desired role to.
68+
69+
1. On the **Review + assign** tab, select **Review + assign** to assign the role.
70+
6471

6572
## Add an external user to a lab using PowerShell
6673

@@ -110,20 +117,23 @@ For example, the added owners do not have full access to some of the resources t
110117

111118
To add an owner to an Azure subscription, follow these steps:
112119

113-
1. Sign in to the [Azure portal](https://go.microsoft.com/fwlink/p/?LinkID=525040).
114-
2. Select **All Services**, and then select **Subscriptions** from the list.
115-
3. Select the desired subscription.
116-
4. Select **Access** icon.
117-
118-
![Access users](./media/devtest-lab-add-devtest-user/access-users.png)
119-
5. On the **Users** blade, select **Add**.
120-
121-
![Add user](./media/devtest-lab-add-devtest-user/devtest-users-blade.png)
122-
6. On the **Select a role** blade, select **Owner**.
123-
7. On the **Add users** blade, enter the email address or name of the user you want to add as an owner. If the user can't be found, you get an error message explaining the issue. If the user is found, that user is listed under the **User** text box.
124-
8. Select the located user name.
125-
9. Select **Select**.
126-
10. Select **OK** to close the **Add access** blade.
127-
11. When you return to the **Users** blade, the user has been added as an owner. This user is now an owner of any labs created under this subscription, and thus is able to perform owner tasks.
120+
1. Sign in to the [Azure portal](https://portal.azure.com) as [User Access Administrator](../role-based-access-control/built-in-roles.md#user-access-administrator) or [Owner](../role-based-access-control/built-in-roles.md#owner).
121+
122+
1. Open the desired Subscription group.
123+
124+
1. In the navigation menu, select **Access control (IAM)**.
125+
126+
1. Select **Add** > **Add role assignment**.
127+
128+
![Access control (IAM) page with Add role assignment menu open.](../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png)
129+
130+
1. On the **Role** tab, select the **OWNER** role.
131+
132+
![Add role assignment page with Role tab selected.](../../includes/role-based-access-control/media/add-role-assignment-role-generic.png)
133+
134+
1. On the **Members** tab, select the user you want to give the owner role to.
135+
136+
1. On the **Review + assign** tab, select **Review + assign** to assign the role.
137+
128138

129139
[!INCLUDE [devtest-lab-try-it-out](../../includes/devtest-lab-try-it-out.md)]

articles/devtest-labs/tutorial-create-custom-lab.md

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -68,18 +68,24 @@ The following steps illustrate how to use the Azure portal to create a lab in Az
6868
6969
## Add a user to the Lab User role
7070

71-
1. Select **Configuration and policies** in the left menu.
71+
1. Sign in to the [Azure portal](https://portal.azure.com) as [User Access Administrator](../role-based-access-control/built-in-roles.md#user-access-administrator) or [Owner](../role-based-access-control/built-in-roles.md#owner).
7272

73-
![Configuration and policies](./media/tutorial-create-custom-lab/configuration-and-policies-menu.png)
74-
1. Select **Access control (IAM)** from the menu, and select **+ Add role assignment** on the toolbar.
73+
1. Open the resource group containing the lab you created
7574

76-
![Add role assignment - button](./media/tutorial-create-custom-lab/add-role-assignment-button.png)
77-
1. On the **Add permissions** page, do the following actions:
78-
1. For **Role**, select **DevTest Labs User**.
79-
2. Select the **user** you want to add.
80-
3. Select **Save**.
75+
1. In the navigation menu, select **Access control (IAM)**.
76+
77+
1. Select **Add** > **Add role assignment**.
78+
79+
![Access control (IAM) page with Add role assignment menu open.](../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png)
80+
81+
1. On the **Role** tab, select the **DevTest Labs User** role.
82+
83+
![Add role assignment page with Role tab selected.](../../includes/role-based-access-control/media/add-role-assignment-role-generic.png)
84+
85+
1. On the **Members** tab, select the user you want to give the desired role to.
86+
87+
1. On the **Review + assign** tab, select **Review + assign** to assign the role.
8188

82-
![Add user](./media/tutorial-create-custom-lab/add-user.png)
8389

8490
## Clean up resources
8591
The next tutorial shows how a lab user can claim and connect to a VM in the lab. If you don't want to do that tutorial, and clean up the resources created as part of this tutorial, follow these steps:

0 commit comments

Comments
 (0)