You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|**Members**| Search for and select the user-assigned managed identity that you created when you [added a user-assigned identity to the dev center](#add-a-user-assigned-identity-to-dev-center). |
107
107
108
-
You can use the same managed identity in multiple dev centers and compute galleries. Any dev center with the managed identity added will have the necessary permissions to the images in the gallery that you've added the owner role assignment to.
108
+
You can use the same managed identity in multiple dev centers and compute galleries. Any dev center with the managed identity added will have the necessary permissions to the images in the gallery that you've added the Owner role assignment to.
Copy file name to clipboardExpand all lines: articles/dev-box/how-to-customize-devbox-azure-image-builder.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,9 +14,9 @@ ms.topic: how-to
14
14
15
15
By using standardized virtual machine (VM) images, your organization can more easily migrate to the cloud and help ensure consistency in your deployments.
16
16
17
-
Images ordinarily include predefined security, configuration settings, and any necessary software. Setting up your own imaging pipeline requires time, infrastructure, and many other details. With Azure VM Image Builder, you can create a configuration that describes your image and submit it to the service, where the image is built and then distributed to a dev box project.
17
+
Images ordinarily include predefined security, configuration settings, and any necessary software. Setting up your own imaging pipeline requires time, infrastructure, and many other details. With Azure VM Image Builder, you can create a configuration that describes your image. The service then builds the image and submits it to a dev box project.
18
18
19
-
In this article, you create a customized dev box using a template that includes a customization step to install Visual Studio Code (VS Code).
19
+
In this article, you create a customized dev box by using a template. The template includes a customization step to install Visual Studio Code (VS Code).
20
20
21
21
Although it's possible to create custom VM images by hand or by using other tools, the process can be cumbersome and unreliable. VM Image Builder, which is built on HashiCorp Packer, gives you the benefits of a managed service.
22
22
@@ -28,23 +28,23 @@ To reduce the complexity of creating VM images, VM Image Builder:
28
28
29
29
- Can fetch customization data from various sources, which removes the need to collect them all from one place.
30
30
31
-
- Can be integrated with Compute Gallery, which creates an image management system with which to distribute, replicate, version, and scale images globally. Additionally, you can distribute the same resulting image as a VHD or as one or more managed images, without having to rebuild them from scratch.
31
+
- Can be integrated with Azure Compute Gallery. Compute Gallery creates an image management system with for distributing, replicating, versioning, and scaling images globally. Additionally, you can distribute the same resulting image as a virtual hard disk or as one or more managed images, without having to rebuild them from scratch.
32
32
33
33
## Prerequisites
34
34
35
-
To provision a custom image you've creating by using VM Image Builder, you need:
35
+
To provision a custom image that you created by using VM Image Builder, you need:
36
36
37
-
- Owner or Contributor permissions on an Azure Subscription or a specific resource group.
38
-
- A resource group
39
-
- A dev center with an attached network connection. If you don't have a dev center with an attached network connection, follow the steps to attach the network connection in [Create a network connection](./quickstart-configure-dev-box-service.md#create-a-network-connection).
37
+
- Owner or Contributor permissions on an Azure subscription or a specific resource group.
38
+
- A resource group.
39
+
- A dev center with an attached network connection. If you don't have a one, follow the steps in [Create a network connection](./quickstart-configure-dev-box-service.md#create-a-network-connection).
40
40
41
-
## Create a Windows image and distribute it to a compute gallery
41
+
## Create a Windows image and distribute it to Azure Compute Gallery
42
42
43
-
The next step is to use Azure VM Image Builder and Azure PowerShell to create an image version in an Azure Compute Gallery (formerly Shared Image Gallery) and then distribute the image globally. You can also do this by using the Azure CLI.
43
+
The next step is to use Azure VM Image Builder and Azure PowerShell to create an image version in Azure Compute Gallery (formerly Shared Image Gallery) and then distribute the image globally. You can also do this by using the Azure CLI.
44
44
45
45
1. To use VM Image Builder, you need to register the features.
46
46
47
-
Check your provider registrations. Make sure that each one returns Registered.
47
+
Check your provider registrations. Make sure that each one returns `Registered`.
@@ -72,12 +72,12 @@ The next step is to use Azure VM Image Builder and Azure PowerShell to create an
72
72
73
73
3. Create variables to store information that you'll use more than once.
74
74
75
-
Copy the sample code and replace the Resource group with the resource group you have used to create the dev center.
75
+
Copy the following sample code. Replace `<Resource group>` with the resource group that you used to create the dev center.
76
76
77
77
```powershell
78
78
# Get existing context
79
79
$currentAzContext = Get-AzContext
80
-
# Get your current subscription ID.
80
+
# Get your current subscription ID
81
81
$subscriptionID=$currentAzContext.Subscription.Id
82
82
# Destination image resource group
83
83
$imageResourceGroup="<Resource group>"
@@ -91,10 +91,10 @@ The next step is to use Azure VM Image Builder and Azure PowerShell to create an
91
91
92
92
4. Create a user-assigned identity and set permissions on the resource group.
93
93
94
-
VM Image Builder uses the provided user-identity to inject the image into Azure Compute Gallery. In this example, you create an Azure role definition with specific actions for distributing the image. The role definition is then assigned to the user identity.
94
+
VM Image Builder uses the provided useridentity to inject the image into Azure Compute Gallery. The following example creates an Azure role definition with specific actions for distributing the image. The role definition is then assigned to the user identity.
To use VM Image Builder with an Azure Compute Gallery, you need to have an existing gallery and image definition. VM Image Builder doesn't create the gallery and image definition for you. The definition created below will have Trusted Launch as security type and meets the windows 365 image requirements.
134
+
To use VM Image Builder with Azure Compute Gallery, you need to have an existing gallery and image definition. VM Image Builder doesn't create the gallery and image definition for you. The following code creates a definition that has trusted launch as the security type and meets the Windows 365 image requirements.
1. Copy the ARM template for Azure VM Image Builder. This template indicates the source image and also the customizations applied. With this template, we are installing choco and VS Code. It also indicates where the image will be distributed.
156
+
1. Copy the following Azure Resource Manger template for VM Image Builder. This template indicates the source image and the customizations applied. This template installs Choco and VS Code. It also indicates where the image will be distributed.
Your template must be submitted to the service. The following commands will download any dependent artifacts, such as scripts, and store them in the staging resource group, which is prefixed with IT_.
253
+
Your template must be submitted to the service. The following commands download any dependent artifacts, such as scripts, and store them in the staging resource group. The staging resource group is prefixed with `IT_`.
Alternatively, you can go to the Azure portal to your compute gallery > image definition to view the provisioning state of your image.
272
+
Alternatively, you can view the provisioning state of your image in the Azure portal by going to your gallery and then the image definition.
273
273
274
-

274
+
:::image type="content" source="media/how-to-customize-devbox-azure-image-builder/image-version-provisioning-state.png" alt-text="Screenshot that shows the provisioning state of the customized image version.":::
275
275
276
276
## Configure the gallery
277
277
278
-
After your custom image has been provisioned within the compute gallery, you can configure the gallery to use the images within the dev center. For more details, see [Configure Azure Compute Gallery](./how-to-configure-azure-compute-gallery.md).
278
+
After your custom image has been provisioned in the gallery, you can configure the gallery to use the images in the dev center. For more information, see [Configure Azure Compute Gallery](./how-to-configure-azure-compute-gallery.md).
279
279
280
280
## Set up the Dev Box service with a custom image
281
281
282
-
After the compute gallery images are available in the dev center, you can use the custom image with the Dev Box service. For more details, see [Configure the Microsoft Dev Box Service](./quickstart-configure-dev-box-service.md).
282
+
After the gallery images are available in the dev center, you can use the custom image with the Microsoft Dev Box Preview service. For more information, see [Quickstart: Configure Microsoft Dev Box Preview](./quickstart-configure-dev-box-service.md).
description: Learn how to provide access to projects for dev box users so that they can create and manage dev boxes.
5
5
services: dev-box
@@ -12,7 +12,7 @@ ms.topic: how-to
12
12
13
13
# Provide access to projects for dev box users
14
14
15
-
Team members must have access to a specific Microsoft Dev Box Preview project before they can create dev boxes. By using the built-in DevCenter Dev Box User role, you can assign permissions to Active Directory Users or Groups at the project level.
15
+
Team members must have access to a specific Microsoft Dev Box Preview project before they can create dev boxes. By using the built-in DevCenter Dev Box User role, you can assign permissions to Active Directory users or groups at the project level.
1. Sign in to the [Azure portal](https://portal.azure.com).
30
-
31
-
1. In the search box, type *Dev box* and select **Projects**.
32
30
33
-
1. Select the project you want to provide your team members access to.
34
-
35
-
:::image type="content" source="./media/how-to-dev-box-user/projects-grid.png" alt-text="Screenshot showing the list of existing projects.":::
31
+
1. In the search box, enter **Dev box**. In the search results, select **Projects**.
32
+
33
+
1. Select the project that you want to give your team members access to.
34
+
35
+
:::image type="content" source="./media/how-to-dev-box-user/projects-grid.png" alt-text="Screenshot that shows a list of existing projects.":::
36
+
37
+
1. On the left menu, select **Access Control (IAM)**.
36
38
37
-
1. Select **Access Control (IAM)** from the left menu.
38
-
39
39
1. Select **Add** > **Add role assignment**.
40
40
41
41
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
42
-
42
+
43
43
| Setting | Value |
44
44
| --- | --- |
45
45
|**Role**| Select **DevCenter Dev Box User**. |
46
46
|**Assign access to**| Select **User, group, or service principal**. |
47
-
|**Members**| Select the users or groups you want to have access to the project. |
47
+
|**Members**| Select the users or groups that you want to have access to the project. |
48
48
49
-
:::image type="content" source="media/how-to-dev-box-user/add-role-assignment-user.png" alt-text="Screenshot that shows the Add role assignment pane.":::
49
+
:::image type="content" source="media/how-to-dev-box-user/add-role-assignment-user.png" alt-text="Screenshot that shows the pane for adding role assignments.":::
50
50
51
-
The user will now be able to view the project and all the pools within it. Dev box users can create dev boxes from any of the pools and manage those dev boxes from the [developer portal](https://aka.ms/devbox-portal).
51
+
The user can now view the project and all the pools within it. Dev box users can create dev boxes from any of the pools and manage those dev boxes from the [developer portal](https://aka.ms/devbox-portal).
52
52
53
53
[!INCLUDE [dev box runs on creation note](./includes/note-dev-box-runs-on-creation.md)]
54
+
54
55
## Next steps
55
56
56
57
-[Quickstart: Create a dev box by using the developer portal](quickstart-create-dev-box.md)
0 commit comments