You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-vmware/deploy-arc-for-azure-vmware-solution.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -178,29 +178,29 @@ After your Azure VMware Solution vCenter resources have been enabled for access
178
178
179
179
This section will demonstrate how to use custom roles to manage granular access to VMware vSphere resources through Azure.
180
180
181
-
#### Arc-enabled VMware vSphere custom roles
181
+
#### Arc-enabled VMware vSphere built-in roles
182
182
183
-
Three custom roles are provided to meet your Role-based access control (RBAC) requirements. These roles can be applied to a whole subscription, resource group, or a single resource.
183
+
There are three built-in roles to meet your Role-based access control (RBAC) requirements. You can apply these roles to a whole subscription, resource group, or a single resource.
184
184
185
-
- Azure Arc VMware vSphere Administrator role
186
-
- Azure Arc VMware vSphere Private Cloud User role
187
-
- Azure Arc VMware vSphere VM Contributor role
185
+
**Azure Arc VMware Administrator role** - is used by administrators
188
186
189
-
The first role is for an Administrator. The other two roles apply to anyone who needs to deploy or manage a VM.
187
+
**Azure Arc VMware Private Cloud User role** - is used by anyone who needs to deploy and manage VMs
188
+
189
+
**Azure Arc VMware VM Contributor role** - is used by anyone who needs to deploy and manage VMs
This custom role gives the user permission to conduct all possible operations for the `Microsoft.ConnectedVMwarevSphere` resource provider. This role should be assigned to users or groups who are administrators that manage Azure Arc-enabled Azure VMware Solution deployment.
193
+
This role provides permissions to perform all possible operations for the Microsoft.ConnectedVMwarevSphere resource provider. Assign this role to users or groups that are administrators managing Azure Arcenabled VMware vSphere deployment.
194
194
195
195
**Azure Arc Azure VMware Solution Private Cloud User role**
196
196
197
-
This custom role gives the user permission to use the Arc-enabled Azure VMware Solutions vSphere resources that have been made accessible through Azure. This role should be assigned to any users or groups that need to deploy, update, or delete VMs.
197
+
This role gives the user permission to use the Arc-enabled Azure VMware Solutions vSphere resources that have been made accessible through Azure. This role should be assigned to any users or groups that need to deploy, update, or delete VMs.
198
198
199
199
We recommend assigning this role at the individual resource pool (host or cluster), virtual network, or template that you want the user to deploy VMs with.
200
200
201
201
**Azure Arc Azure VMware Solution VM Contributor role**
202
202
203
-
This custom role gives the user permission to perform all VMware VM operations. This role should be assigned to any users or groups that need to deploy, update, or delete VMs.
203
+
This role gives the user permission to perform all VMware VM operations. This role should be assigned to any users or groups that need to deploy, update, or delete VMs.
204
204
205
205
We recommend assigning this role at the subscription level or resource group you want the user to deploy VMs with.
206
206
@@ -403,7 +403,7 @@ For the final step, you'll need to delete the resource bridge VM and the VM temp
403
403
404
404
**Is Arc supported in all the Azure VMware Solution regions?**
405
405
406
-
Arc is supported in EastUSand WestEU regions however we are working to extend the regional support.
406
+
Arc is supported in EastUS, WestEU, UK South, Australia East, Canada Central and Southeast Asia regions however we are working to extend the regional support.
0 commit comments