You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -30,7 +30,7 @@ If you don't have an Azure account with an active subscription, [create one for
30
30
31
31
If you're running Azure CLI locally, use Azure CLI version 2.0.28 or later. Run `az --version` to find the installed version. If you need to install or upgrade, see [Install Azure CLI](/cli/azure/install-azure-cli). Run `az login` to sign in to Azure.
32
32
33
-
The account you log into, or connect to Azure with must be assigned to the [Network contributor role](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) or to a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json)that's assigned the appropriate actions listed in[Permissions](#permissions).
33
+
Assign the [Network contributor role](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) or a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json)with the appropriate [Permissions](#permissions).
34
34
35
35
## Work with network security groups
36
36
@@ -124,9 +124,13 @@ Under **Help**, you can view **Effective security rules**. For more information,
124
124
To learn more about the common Azure settings listed, see the following articles:
The most common changes to a network security group are:
166
176
-[Associate or dissociate a network security group to or from a network interface](#associate-or-dissociate-a-network-security-group-to-or-from-a-network-interface)
177
+
167
178
-[Associate or dissociate a network security group to or from a subnet](#associate-or-dissociate-a-network-security-group-to-or-from-a-subnet)
179
+
168
180
-[Create a security rule](#create-a-security-rule)
181
+
169
182
-[Delete a security rule](#delete-a-security-rule)
170
183
171
184
### Associate or dissociate a network security group to or from a network interface
172
185
173
-
To associate a network security group to, or dissociate a network security group from a network interface, see [Associate a network security group to, or dissociate a network security group from a network interface](virtual-network-network-interface.md#associate-or-dissociate-a-network-security-group).
186
+
For more information about the association and dissociation of a network security group, see [Associate or dissociate a network security group](virtual-network-network-interface.md#associate-or-dissociate-a-network-security-group).
174
187
175
188
### Associate or dissociate a network security group to or from a subnet
To do tasks on network security groups, security rules, and application security groups, your account must be assigned to the [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role or to a [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) that's assigned the appropriate permissions as listed in the following tables:
666
+
To manage network security groups, security rules, and application security groups, your account must be assigned to the [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role. A [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) can also be used that's assigned the appropriate permissions as listed in the following tables:
654
667
655
668
### Network security group
656
669
@@ -661,13 +674,9 @@ To do tasks on network security groups, security rules, and application security
661
674
| Microsoft.Network/networkSecurityGroups/delete | Delete network security group |
662
675
| Microsoft.Network/networkSecurityGroups/join/action | Associate a network security group to a subnet or network interface
663
676
664
-
665
-
666
677
>[!NOTE]
667
678
> To perform `write` operations on a network security group, the subscription account must have at least `read` permissions for resource group along with `Microsoft.Network/networkSecurityGroups/write` permission.
668
679
669
-
670
-
671
680
### Network security group rule
672
681
673
682
| Action | Name |
@@ -689,4 +698,5 @@ To do tasks on network security groups, security rules, and application security
689
698
## Next steps
690
699
691
700
- Add or remove [a network interface to or from an application security group](./virtual-network-network-interface.md?tabs=network-interface-portal#add-or-remove-from-application-security-groups).
701
+
692
702
- Create and assign [Azure Policy definitions](./policy-reference.md) for virtual networks
0 commit comments