Skip to content

Commit f37d115

Browse files
committed
fixes and added not about permissions for remote virtual network
1 parent eb392af commit f37d115

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

articles/virtual-network/virtual-network-manage-peering.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -349,30 +349,29 @@ az network vnet peering delete \
349349

350350
The accounts you use to work with virtual network peering must be assigned to the following roles:
351351

352-
- [Network Contributor](../role-based-access-control/built-in-roles.md#network-contributor): For a virtual network deployed through Resource Manager.
353-
354-
- [Classic Network Contributor](../role-based-access-control/built-in-roles.md#classic-network-contributor): For a virtual network deployed through, the classic deployment model.
352+
- [Network Contributor](../role-based-access-control/built-in-roles.md#network-contributor)
355353

356354
If your account isn't assigned to one of the previous roles, it must be assigned to a [custom role](../role-based-access-control/custom-roles.md) that is assigned the necessary actions from the following table:
357355

358356
| Action | Name |
359357
|--- |--- |
360-
| **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/write** | Required to create a peering from virtual network A to virtual network B. Virtual network A must be a virtual network (Resource Manager) |
361-
| **Microsoft.Network/virtualNetworks/peer/action** | Required to create a peering from virtual network B (Resource Manager) to virtual network A |
362-
| **Microsoft.ClassicNetwork/virtualNetworks/peer/action** | Required to create a peering from virtual network B (classic) to virtual network A |
358+
| **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/write** | Required to create a peering from virtual network A to virtual network B. Virtual network A must be a virtual network |
359+
| **Microsoft.Network/virtualNetworks/peer/action** | Required to create a peering from virtual network B to virtual network A |
363360
| **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/read** | Read a virtual network peering |
364361
| **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/delete** | Delete a virtual network peering |
365362

363+
> [!NOTE]
364+
> If the remote peered virtual network is in a different subscription or tenant, you must have Network Contributor or the custom roles of **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/read** and **Microsoft.Network/virtualNetworks/virtualNetworkPeerings/delete** to remove the remote virtual network peering.
365+
366366
## Next steps
367367

368368
- A virtual network peering can be created between virtual networks created through the same, or different deployment models that exist in the same, or different subscriptions. Complete a tutorial for one of the following scenarios:
369369

370370
|Azure deployment model | Subscription |
371371
|--------- |---------|
372-
|Both Resource Manager |[Same](tutorial-connect-virtual-networks-portal.md)|
372+
|Resource Manager |[Same](tutorial-connect-virtual-networks-portal.md)|
373373
| |[Different](create-peering-different-subscriptions.md)|
374-
|One Resource Manager, one classic |[Same](create-peering-different-deployment-models.md)|
375-
| |[Different](create-peering-different-deployment-models-subscriptions.md)|
374+
376375

377376
- Learn how to create a [**hub** and spoke network topology](/azure/architecture/reference-architectures/hybrid-networking/hub-spoke)
378377

0 commit comments

Comments
 (0)