Skip to content

Commit ec9e13e

Browse files
committed
RBAC updates to ADE files.
1 parent 172e479 commit ec9e13e

File tree

8 files changed

+57
-59
lines changed

8 files changed

+57
-59
lines changed

articles/deployment-environments/how-to-configure-deployment-environments-user.md

Lines changed: 22 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -26,41 +26,44 @@ When you assign the role at the project level, the user can perform the precedin
2626

2727
## Assign permissions to developers for a project
2828

29-
1. Select the project that you want your development team members to be able to access.
30-
2. Select **Access control (IAM)** from the left menu.
29+
1. In the Azure portal, go to your project.
3130

32-
:::image type="content" source=".\media\configure-deployment-environments-user\access-control-page.png" alt-text="Screenshot that shows the link to the access control page.":::
31+
1. In the left menu, select **Access control (IAM)**.
3332

34-
3. Select **Add** > **Add role assignment**.
33+
1. Select **Add** > **Add role assignment**.
3534

36-
:::image type="content" source=".\media\configure-deployment-environments-user\add-role-assignment.png" alt-text="Screenshot that shows the menu option for adding a role assignment.":::
35+
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
36+
37+
| Setting | Value |
38+
| --- | --- |
39+
| **Role** | Select **[Deployment Environments user](how-to-configure-deployment-environments-user.md)**. |
40+
| **Assign access to** | Select a **User, group, or service principal**. |
41+
| **Members** | Select the users or groups you want to have access to the project. |
3742

38-
4. On the **Add role assignment** page, on the **Role** tab, search for **deployment environments user**, select the **Deployment Environments User** built-in role, and then select **Next**.
39-
5. On the **Members** tab, select **+ Select members**.
40-
6. In **Select members**, select the Active Directory users or groups that you want to add, and then choose **Select**.
41-
7. On the **Members** tab, select **Review + assign**.
43+
:::image type="content" source="media/quickstart-create-configure-projects/add-role-assignment.png" alt-text="Screenshot that shows the Add role assignment pane.":::
4244

4345
The users can now view the project and all the environment types that you've enabled within it. Users who have the Deployment Environments User role can also [create environments from the Azure CLI](./quickstart-create-access-environments.md).
4446

4547
## Assign permissions to developers for an environment type
4648

4749
1. Select the project that you want your development team members to be able to access.
48-
2. Select **Environment types**, and then select the ellipsis (**...**) beside the specific environment type.
50+
1. Select **Environment types**, and then select the ellipsis (**...**) beside the specific environment type.
4951

5052
:::image type="content" source=".\media\configure-deployment-environments-user\project-environment-types.png" alt-text="Screenshot that shows the environment types associated with a project.":::
5153

52-
3. Select **Access control (IAM)**.
53-
54-
:::image type="content" source=".\media\configure-deployment-environments-user\access-control-page.png" alt-text="Screenshot that shows the link to the access control page.":::
54+
1. Select **Access control (IAM)**.
5555

56-
4. Select **Add** > **Add role assignment**.
56+
1. Select **Add** > **Add role assignment**.
5757

58-
:::image type="content" source=".\media\configure-deployment-environments-user\add-role-assignment.png" alt-text="Screenshot that shows the menu option for adding a role assignment.":::
58+
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
59+
60+
| Setting | Value |
61+
| --- | --- |
62+
| **Role** | Select [Deployment Environments user](how-to-configure-deployment-environments-user.md). |
63+
| **Assign access to** | Select a **User, group, or service principal**. |
64+
| **Members** | Select the users or groups you want to have access to the project. |
5965

60-
5. On the **Add role assignment** page, on the **Role** tab, search for **deployment environments user**, select the **Deployment Environments User** built-in role, and then select **Next**.
61-
6. On the **Members** tab, select **+ Select members**.
62-
7. In **Select members**, select the Active Directory users or groups that you want to add, and then choose **Select**.
63-
8. On the **Members** tab, select **Review + assign**.
66+
:::image type="content" source="media/quickstart-create-configure-projects/add-role-assignment.png" alt-text="Screenshot that shows the Add role assignment pane.":::
6467

6568
The users can now view the project and the specific environment type that you've granted them access to. Users who have the Deployment Environments User role can also [create environments by using the Azure CLI](./quickstart-create-access-environments.md).
6669

articles/deployment-environments/how-to-configure-project-admin.md

Lines changed: 20 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -28,25 +28,18 @@ When you assign the role at the project level, the user can perform the precedin
2828
## Assign permissions to dev managers for a project
2929

3030
1. Select the project that you want your development team members to be able to access.
31-
2. Select **Access control (IAM)** from the left menu.
31+
1. Select **Access control (IAM)** from the left menu.
32+
1. Select **Add** > **Add role assignment**.
3233

33-
:::image type="content" source=".\media\configure-project-admin\access-control-page.png" alt-text="Screenshot that shows the link to the access control page.":::
34+
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
35+
36+
| Setting | Value |
37+
| --- | --- |
38+
| **Role** | Select **DevCenter Project Admin**. |
39+
| **Assign access to** | Select a **User, group, or service principal**. |
40+
| **Members** | Select the users or groups you want to have administrative access to the project. |
3441

35-
3. Select **Add** > **Add role assignment**.
36-
37-
:::image type="content" source=".\media\configure-project-admin\add-role-assignment.png" alt-text="Screenshot that shows the menu option for adding a role assignment.":::
38-
39-
4. On the **Add role assignment** page, on the **Role** tab, search for **devcenter project admin**, select the **DevCenter Project Admin** built-in role, and then select **Next**.
40-
41-
:::image type="content" source=".\media\configure-project-admin\built-in-role.png" alt-text="Screenshot that shows selecting the built-in DevCenter Project Admin role.":::
42-
43-
5. On the **Members** tab, select **+ Select members**.
44-
45-
:::image type="content" source=".\media\configure-project-admin\select-role-members.png" alt-text="Screenshot that shows the link for selecting role members.":::
46-
47-
1. In **Select members**, select the Active Directory users or groups that you want to add, and then choose **Select**.
48-
49-
7. On the **Members** tab, select **Review + assign**.
42+
:::image type="content" source="media/configure-project-admin/add-role-assignment-admin.png" alt-text="Screenshot that shows the Add role assignment pane.":::
5043

5144
The users can now view the project and manage all the environment types that you've enabled within it. DevCenter Project Admin users can also [create environments from the Azure CLI](./quickstart-create-access-environments.md).
5245

@@ -57,21 +50,19 @@ The users can now view the project and manage all the environment types that you
5750

5851
:::image type="content" source=".\media\configure-project-admin\project-environment-types.png" alt-text="Screenshot that shows the environment types associated with a project.":::
5952

60-
3. Select **Access control (IAM)**.
61-
62-
:::image type="content" source=".\media\configure-project-admin\access-control-page.png" alt-text="Screenshot that shows the link to the access control page.":::
63-
64-
4. Select **Add** > **Add role assignment**.
65-
66-
:::image type="content" source=".\media\configure-project-admin\add-role-assignment.png" alt-text="Screenshot that shows the menu option for adding a role assignment.":::
53+
1. In the left menu, select **Access control (IAM)**.
6754

68-
5. On the **Add role assignment** page, on the **Role** tab, search for **devcenter project admin**, select the **DevCenter Project Admin** built-in role, and then select **Next**.
55+
1. Select **Add** > **Add role assignment**.
6956

70-
:::image type="content" source=".\media\configure-project-admin\built-in-role.png" alt-text="Screenshot that shows selecting the built-in DevCenter Project Admin role.":::
57+
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
58+
59+
| Setting | Value |
60+
| --- | --- |
61+
| **Role** | Select **DevCenter Project Admin**. |
62+
| **Assign access to** | Select a **User, group, or service principal**. |
63+
| **Members** | Select the users or groups you want to have administrative access to the project. |
7164

72-
6. On the **Members** tab, select **+ Select members**.
73-
7. In **Select members**, select the Active Directory users or groups that you want to add, and then choose **Select**.
74-
8. On the **Members** tab, select **Review + assign**.
65+
:::image type="content" source="media/configure-project-admin/add-role-assignment-admin.png" alt-text="Screenshot that shows the Add role assignment pane.":::
7566

7667
The users can now view the project and manage only the specific environment type that you've granted them access to. DevCenter Project Admin users can also [create environments by using the Azure CLI](./quickstart-create-access-environments.md).
7768

19.2 KB
Loading
49 Bytes
Loading
31.7 KB
Loading
47 Bytes
Loading
-32.1 KB
Loading

articles/deployment-environments/quickstart-create-and-configure-projects.md

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -65,11 +65,14 @@ In this quickstart you assign the Owner role to the system-assigned managed iden
6565

6666
:::image type="content" source="media/quickstart-create-configure-projects/system-assigned-managed-identity.png" alt-text="Screenshot that shows a system-assigned managed identity with Role assignments highlighted.":::
6767

68-
1. In Azure role assignments, select **Add role assignment (Preview)**, and then enter or select the following information:
69-
- In **Scope**, select **Subscription**.
70-
- In **Subscription**, select the subscription in which to use the managed identity.
71-
- In **Role**, select **Owner**.
72-
- Select **Save**.
68+
1. In Azure role assignments, select **Add role assignment (Preview)**, enter or select the following information, and then select **Save**:
69+
70+
|Name |Value |
71+
|---------|----------|
72+
|**Scope**|Subscription|
73+
|**Subscription**|Select the subscription in which to use the managed identity.|
74+
|**Role**|Owner|
75+
7376
## Configure a project
7477

7578
To configure a project, add a [project environment type](how-to-configure-project-environment-types.md):
@@ -104,12 +107,13 @@ To configure a project, add a [project environment type](how-to-configure-projec
104107

105108
1. Select **Add** > **Add role assignment**.
106109

107-
:::image type="content" source="media/quickstart-create-configure-projects/project-access-control-page.png" alt-text="Screenshot that shows the Access control pane.":::
108-
109-
1. In **Add role assignment**, enter the following information, and then select **Save**:
110-
111-
1. On the **Role** tab, select either [DevCenter Project Admin](how-to-configure-project-admin.md) or [Deployment Environments user](how-to-configure-deployment-environments-user.md).
112-
1. On the **Members** tab, select either a **User, group, or service principal** or a **Managed identity** to assign access.
110+
1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
111+
112+
| Setting | Value |
113+
| --- | --- |
114+
| **Role** | Select **[Deployment Environments user](how-to-configure-deployment-environments-user.md)**. |
115+
| **Assign access to** | Select a **User, group, or service principal**. |
116+
| **Members** | Select the users or groups you want to have access to the project. |
113117

114118
:::image type="content" source="media/quickstart-create-configure-projects/add-role-assignment.png" alt-text="Screenshot that shows the Add role assignment pane.":::
115119

0 commit comments

Comments
 (0)