Skip to content

Commit fba5e4c

Browse files
committed
removed role from blocks with skip assignment
1 parent bd987f9 commit fba5e4c

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

articles/azure-arc/kubernetes/create-onboarding-service-principal.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Walk through the following steps to learn how to use service principals for conn
2424
Create a new service principal with an informative name that is unique for your Azure Active Directory tenant.
2525

2626
```azurecli
27-
az ad sp create-for-RBAC --skip-assignment --name "https://azure-arc-for-k8s-onboarding" --role Contributor
27+
az ad sp create-for-RBAC --skip-assignment --name "https://azure-arc-for-k8s-onboarding"
2828
```
2929

3030
**Output:**
@@ -52,7 +52,7 @@ You can limit permissions further by passing in the appropriate `--scope` argume
5252
| Subscription | `--scope /subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333` | Service principal can register cluster in any resource group under that subscription. |
5353
| Resource Group | `--scope /subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup` | Service principal can __only__ register clusters in the resource group `myGroup`. |
5454

55-
```console
55+
```azurecli
5656
az role assignment create \
5757
--role 34e09817-6cbe-4d01-b1a2-e0eac5743d41 \ # this is the id for the built-in role
5858
--assignee 22cc2695-54b9-49c1-9a73-2269592103d8 \ # use the appId from the new SP

articles/cognitive-services/containers/azure-kubernetes-recipe.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,7 @@ The following steps are needed to get the required information to connect your c
173173
1. Create service principal.
174174
175175
```azurecli-interactive
176-
az ad sp create-for-rbac --role Contributor --skip-assignment
176+
az ad sp create-for-rbac --skip-assignment
177177
```
178178
179179
Save the results `appId` value for the assignee parameter in step 3, `<appId>`. Save the `password` for the next section's client-secret parameter `<client-secret>`.

0 commit comments

Comments
 (0)