Skip to content

Commit dae6dca

Browse files
Merge pull request #278345 from miwithro/patch-252
Update use-managed-identity.md
2 parents db288a7 + ab0fa6c commit dae6dca

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/aks/use-managed-identity.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -135,14 +135,14 @@ CLIENT_ID=$(az aks show \
135135

136136
To grant a system-assigned managed identity permissions to a resource in Azure, call the [`az role assignment create`][az-role-assignment-create] command to assign an Azure RBAC role to the managed identity.
137137

138-
For a VNet, attached Azure disk, static IP address, or route table outside the default worker node resource group, you need to assign the `Contributor` role on the custom resource group.
138+
For a VNet, attached Azure disk, static IP address, or route table outside the default worker node resource group, you need to assign the ` Network Contributor` role on the custom resource group.
139139

140-
For example, assign the `Contributor` role on the custom resource group using the [`az role assignment create`][az-role-assignment-create] command. For the `--scope` parameter, provide the resource ID for the resource group for the cluster.
140+
For example, assign the `Network Contributor` role on the custom resource group using the [`az role assignment create`][az-role-assignment-create] command. For the `--scope` parameter, provide the resource ID for the resource group for the cluster.
141141

142142
```azurecli-interactive
143143
az role assignment create \
144144
--assignee $CLIENT_ID \
145-
--role "Contributor" \
145+
--role "Network Contributor" \
146146
--scope "<resource-group-id>"
147147
```
148148

0 commit comments

Comments
 (0)