Skip to content

Commit f844621

Browse files
committed
Update hdinsight-migrate-granular-access-cluster-configurations.md
1 parent 48d82fb commit f844621

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/hdinsight/hdinsight-migrate-granular-access-cluster-configurations.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,11 +19,11 @@ Previously, secrets could be obtained via the HDInsight API by cluster users
1919
possessing the Owner, Contributor, or Reader [RBAC
2020
roles](https://docs.microsoft.com/azure/role-based-access-control/rbac-and-directory-admin-roles).
2121
Going forward, these secrets will no longer be accessible to users with the
22-
Reader role. We are also be introducing a new ‘HDInisght Cluster Operator’ Role
22+
Reader role. We are also introducing a new ‘HDInisght Cluster Operator’ Role
2323
that is be able to retrieve secrets without being granted the administrative
2424
permissions of Contributor or Owner. To summarize:
2525

26-
| Role | Previously | Now |
26+
| Role | Previously | Going Forward |
2727
|---------------------------------------|--------------------------------------------------------------------------------------------------|-----------|
2828
| Reader | - Read access, including secrets | - Read access, **excluding** secrets | | | |
2929
| HDInsight Cluster Operator<br>(New Role) | N/A | - Read/write access, including secrets | | |
@@ -145,7 +145,7 @@ Please update to [version 27.1.0](https://github.com/Azure/azure-sdk-for-go/tree
145145

146146
## Add the HDInsight Cluster Operator role assignment to a user
147147

148-
A user with the [Contributor](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#contributor) or [Owner](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#owner) role can grant the HDInsight Cluster Operator role to users that you want to have read/write access to HDInsight cluster secrets like cluster gateway credentials and storage account keys.
148+
A user with the [Contributor](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#contributor) or [Owner](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#owner) role can assign the HDInsight Cluster Operator role to users that you would want to have read/write access to sensitive HDInsight cluster configuration vlues (such as cluster gateway credentials and storage account keys).
149149

150150
### Using the Azure CLI
151151

0 commit comments

Comments
 (0)