Skip to content

Commit f7e63b5

Browse files
authored
Update continuous-backup-restore-permissions.md
Made the changes for 2 sections
1 parent ee43671 commit f7e63b5

File tree

1 file changed

+3
-7
lines changed

1 file changed

+3
-7
lines changed

articles/cosmos-db/continuous-backup-restore-permissions.md

Lines changed: 3 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -83,23 +83,19 @@ Following permissions are required to perform the different activities pertainin
8383
Roles with permission can be assigned to different scopes to achieve granular control on who can perform the restore operation within a subscription or a given account.
8484

8585
### Assign capability to restore from any restorable account in a subscription
86-
- Assign a user write action on the specific resource group. This action is required to create a new account in the resource group.
87-
- Assign the `CosmosRestoreOperator` built in role to the specific restorable database account that needs to be restored. In the following command, the scope for the `RestorableDatabaseAccount` is extracted from the `ID` property of result of execution of `az cosmosdb restorable-database-account list`(if using CLI) or `Get-AzCosmosDBRestorableDatabaseAccount`(if using the PowerShell)
8886

89-
Assign the `CosmosRestoreOperator` built-in role at subscription level
87+
- Assign the `CosmosRestoreOperator` built in role to the specific subscription level
9088

9189
```azurecli-interactive
9290
az role assignment create --role "CosmosRestoreOperator" --assignee <email> --scope /subscriptions/<subscriptionId>
9391
```
9492

95-
### Assign capability to restore from a specific account
93+
### Assign capability to restore from a specific account
9694
- Assign a user write action on the specific resource group. This action is required to create a new account in the resource group.
9795
- Assign the `CosmosRestoreOperator` built in role to the specific restorable database account that needs to be restored. In the following command, the scope for the `RestorableDatabaseAccount` is extracted from the `ID` property of result of execution of `az cosmosdb restorable-database-account list`(if using CLI) or `Get-AzCosmosDBRestorableDatabaseAccount`(if using the PowerShell)
9896

99-
Assign the `CosmosRestoreOperator` built-in role at subscription level
100-
10197
```azurecli-interactive
102-
az role assignment create --role "CosmosRestoreOperator" --assignee <email> --scope /subscriptions/<subscriptionId>
98+
az role assignment create --role "CosmosRestoreOperator" --assignee <email> --scope <RestorableDatabaseAccount>
10399
```
104100

105101
### Assign capability to restore from any source account in a resource group.

0 commit comments

Comments
 (0)