Skip to content

Commit e2fd91f

Browse files
Venkata YaddanapudiVenkata Yaddanapudi
authored andcommitted
changes for PR feedback
1 parent 8379736 commit e2fd91f

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

articles/event-grid/mqtt-client-authorization-using-rbac.md renamed to articles/event-grid/mqtt-client-authorization-use-rbac.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,12 @@ ms.author: veyaddan
88
---
99

1010
# Authorizing access to publish or subscribe to MQTT messages in Event Grid namespace
11-
You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Azure Active Directory (AAD) identity, to publish or subscribe access to specific topic spaces.
11+
You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Azure Active Directory identity, to publish or subscribe access to specific topic spaces.
1212

1313
## Prerequisites
1414
- You need an Event Grid namespace with MQTT enabled. [Learn about creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
1515
- Review the process to [create a custom role](/azure/role-based-access-control/custom-roles-portal)
1616

17-
1817
## Operation types
1918
You can use following two data actions to provide publish or subscribe permissions to clients with Azure AD identities on specific topic spaces.
2019

@@ -25,7 +24,7 @@ Microsoft.EventGrid/topicSpaces/publish/action
2524
Microsoft.EventGrid/topicSpaces/subscribe/action
2625

2726
> [!NOTE]
28-
> Currently, we recommend using custom roles with the actions provided. Built-in roles for publish and subscribe will be available in future.
27+
> Currently, we recommend using custom roles with the actions provided.
2928
3029
## Custom roles
3130

@@ -85,15 +84,14 @@ The following are sample role definitions that allow you to publish and subscrib
8584
1. Switch the Baseline permissions to **Start from scratch**
8685
1. On the Permissions tab, select **Add permissions**
8786
1. In the selection page, find and select Microsoft Event Grid
88-
:::image type="content" source="./media/mqtt-rbac-authorization-aad-clients/event-grid-custom-role-permissions.png" alt-text="Screenshot showing the Microsoft Event Grid option to find the permissions.":::
87+
:::image type="content" source="./media/mqtt-rbac-authorization-aad-clients/event-grid-custom-role-permissions.png" lightbox="./media/mqtt-rbac-authorization-aad-clients/event-grid-custom-role-permissions.png" alt-text="Screenshot showing the Microsoft Event Grid option to find the permissions.":::
8988
1. Navigate to Data Actions
9089
1. Select **Topic spaces publish** data action and select **Add**
9190
:::image type="content" source="./media/mqtt-rbac-authorization-aad-clients/event-grid-custom-role-permissions-data-actions.png" lightbox="./media/mqtt-rbac-authorization-aad-clients/event-grid-custom-role-permissions-data-actions.png" alt-text="Screenshot showing the data action selection.":::
9291
1. Select Next to see the topic space in the Assignable scopes tab. You can add other assignable scopes if needed.
9392
1. Select **Create** in Review + create tab to create the custom role.
9493
1. Once the custom role is created, you can assign the role to an identity to provide the publish permission on the topic space. You can learn how to assign roles [here](/azure/role-based-access-control/role-assignments-portal).
9594

96-
9795
> [!NOTE]
9896
> You can follow similar steps to create and assign a custom Event Grid MQTT subscriber permission to a topic space.
9997

0 commit comments

Comments
 (0)