Skip to content

Commit e99cbda

Browse files
Merge pull request #235546 from asudbring/linux-fixes
[Doc-a-thon] Linux doc-athon fixes for Manage a network security group article
2 parents d4a5919 + ec7d157 commit e99cbda

File tree

1 file changed

+18
-8
lines changed

1 file changed

+18
-8
lines changed

articles/virtual-network/manage-network-security-group.md

Lines changed: 18 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ author: asudbring
77
ms.service: virtual-network
88
ms.topic: how-to
99
ms.workload: infrastructure-services
10-
ms.date: 02/14/2023
10+
ms.date: 04/24/2023
1111
ms.author: allensu
1212
ms.custom: template-how-to, engagement-fy23, devx-track-azurepowershell, devx-track-azurecli
1313
---
@@ -30,7 +30,7 @@ If you don't have an Azure account with an active subscription, [create one for
3030

3131
If you're running Azure CLI locally, use Azure CLI version 2.0.28 or later. Run `az --version` to find the installed version. If you need to install or upgrade, see [Install Azure CLI](/cli/azure/install-azure-cli). Run `az login` to sign in to Azure.
3232

33-
The account you log into, or connect to Azure with must be assigned to the [Network contributor role](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) or to a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) that's assigned the appropriate actions listed in [Permissions](#permissions).
33+
Assign the [Network contributor role](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) or a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) with the appropriate [Permissions](#permissions).
3434

3535
## Work with network security groups
3636

@@ -124,9 +124,13 @@ Under **Help**, you can view **Effective security rules**. For more information,
124124
To learn more about the common Azure settings listed, see the following articles:
125125

126126
- [Activity log](../azure-monitor/essentials/platform-logs-overview.md)
127+
127128
- [Access control (IAM)](../role-based-access-control/overview.md)
129+
128130
- [Tags](../azure-resource-manager/management/tag-resources.md)
131+
129132
- [Locks](../azure-resource-manager/management/lock-resources.md)
133+
130134
- [Automation script](../azure-resource-manager/templates/export-template-portal.md)
131135

132136
# [**PowerShell**](#tab/network-security-group-powershell)
@@ -140,8 +144,11 @@ Get-AzNetworkSecurityGroup -Name myNSG -ResourceGroupName myResourceGroup
140144
To learn more about the common Azure settings listed, see the following articles:
141145

142146
- [Activity log](../azure-monitor/essentials/platform-logs-overview.md)
147+
143148
- [Access control (IAM)](../role-based-access-control/overview.md)
149+
144150
- [Tags](../azure-resource-manager/management/tag-resources.md)
151+
145152
- [Locks](../azure-resource-manager/management/lock-resources.md)
146153

147154
# [**Azure CLI**](#tab/network-security-group-cli)
@@ -155,22 +162,28 @@ az network nsg show --resource-group myResourceGroup --name myNSG
155162
To learn more about the common Azure settings listed, see the following articles:
156163

157164
- [Activity log](../azure-monitor/essentials/platform-logs-overview.md)
165+
158166
- [Access control (IAM)](../role-based-access-control/overview.md)
167+
159168
- [Tags](../azure-resource-manager/management/tag-resources.md)
169+
160170
- [Locks](../azure-resource-manager/management/lock-resources.md)
161171

162172
---
163173
### Change a network security group
164174

165175
The most common changes to a network security group are:
166176
- [Associate or dissociate a network security group to or from a network interface](#associate-or-dissociate-a-network-security-group-to-or-from-a-network-interface)
177+
167178
- [Associate or dissociate a network security group to or from a subnet](#associate-or-dissociate-a-network-security-group-to-or-from-a-subnet)
179+
168180
- [Create a security rule](#create-a-security-rule)
181+
169182
- [Delete a security rule](#delete-a-security-rule)
170183

171184
### Associate or dissociate a network security group to or from a network interface
172185

173-
To associate a network security group to, or dissociate a network security group from a network interface, see [Associate a network security group to, or dissociate a network security group from a network interface](virtual-network-network-interface.md#associate-or-dissociate-a-network-security-group).
186+
For more information about the association and dissociation of a network security group, see [Associate or dissociate a network security group](virtual-network-network-interface.md#associate-or-dissociate-a-network-security-group).
174187

175188
### Associate or dissociate a network security group to or from a subnet
176189

@@ -650,7 +663,7 @@ az network asg delete --resource-group myResourceGroup --name myASG
650663
---
651664
## Permissions
652665

653-
To do tasks on network security groups, security rules, and application security groups, your account must be assigned to the [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role or to a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) that's assigned the appropriate permissions as listed in the following tables:
666+
To manage network security groups, security rules, and application security groups, your account must be assigned to the [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role. A [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) can also be used that's assigned the appropriate permissions as listed in the following tables:
654667

655668
### Network security group
656669

@@ -661,13 +674,9 @@ To do tasks on network security groups, security rules, and application security
661674
| Microsoft.Network/networkSecurityGroups/delete | Delete network security group |
662675
| Microsoft.Network/networkSecurityGroups/join/action | Associate a network security group to a subnet or network interface
663676

664-
665-
666677
>[!NOTE]
667678
> To perform `write` operations on a network security group, the subscription account must have at least `read` permissions for resource group along with `Microsoft.Network/networkSecurityGroups/write` permission.
668679
669-
670-
671680
### Network security group rule
672681

673682
| Action | Name |
@@ -689,4 +698,5 @@ To do tasks on network security groups, security rules, and application security
689698
## Next steps
690699

691700
- Add or remove [a network interface to or from an application security group](./virtual-network-network-interface.md?tabs=network-interface-portal#add-or-remove-from-application-security-groups).
701+
692702
- Create and assign [Azure Policy definitions](./policy-reference.md) for virtual networks

0 commit comments

Comments
 (0)