Skip to content

Commit ff57f1a

Browse files
Merge pull request #16346 from v-sissondan/rbac-roles
RBAC roles - revert branding
2 parents b292adf + 2d54571 commit ff57f1a

File tree

1 file changed

+10
-13
lines changed

1 file changed

+10
-13
lines changed

azure-local/manage/assign-vm-rbac-roles.md

Lines changed: 10 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: alkohli
55
ms.author: alkohli
66
ms.topic: how-to
77
ms.service: azure-stack-hci
8-
ms.date: 10/24/2024
8+
ms.date: 11/15/2024
99
---
1010

1111
# Use Role-based Access Control to manage Azure Local virtual machines
@@ -16,25 +16,22 @@ This article describes how to use the Role-based Access Control (RBAC) to contro
1616

1717
You can use the builtin RBAC roles to control access to VMs and VM resources such as virtual disks, network interfaces, VM images, logical networks and storage paths. You can assign these roles to users, groups, service principals and managed identities.
1818

19-
20-
[!INCLUDE [hci-preview](../includes/hci-preview.md)]
21-
2219
## About builtin RBAC roles
2320

2421
To control access to VMs and VM resources on Azure Local, you can use the following RBAC roles:
2522

26-
- **Azure Local Administrator** - This role grants full access to your Azure Local instance and its resources. An Azure Local administrator can register the system as well as assign Azure Local VM contributor and Azure Local VM reader roles to other users. They can also create shared resources such as logical networks, VM images, and storage paths.
27-
- **Azure Local VM Contributor** - This role grants permissions to perform all VM actions such as start, stop, restart the VMs. An Azure Local VM Contributor can create and delete VMs, as well as the resources and extensions attached to VMs. An Azure Local VM Contributor can't register the system or assign roles to other users, nor create system-shared resources such as logical networks, VM images, and storage paths.
28-
- **Azure Local VM Reader** - This role grants permissions to only view the VMs. A VM reader can't perform any actions on the VMs or VM resources and extensions.
23+
- **Azure Stack HCI Administrator** - This role grants full access to your Azure Local instance and its resources. An Azure Stack HCI administrator can register the system as well as assign Azure Stack HCI VM contributor and Azure Stack HCI VM reader roles to other users. They can also create shared resources such as logical networks, VM images, and storage paths.
24+
- **Azure Stack HCI VM Contributor** - This role grants permissions to perform all VM actions such as start, stop, restart the VMs. An Azure Stack HCI VM Contributor can create and delete VMs, as well as the resources and extensions attached to VMs. An Azure Stack HCI VM Contributor can't register the system or assign roles to other users, nor create system-shared resources such as logical networks, VM images, and storage paths.
25+
- **Azure Stack HCI VM Reader** - This role grants permissions to only view the VMs. A VM reader can't perform any actions on the VMs or VM resources and extensions.
2926

3027
Here's a table that describes the VM actions granted by each role for the VMs and the various VM resources. The VM resources are referred to resources required to create a VM and include virtual disks, network interfaces, VM images, logical networks, and storage paths:
3128

3229

3330
| Builtin role | VMs | VM resources |
3431
|--|--|--|
35-
| Azure Local Administrator | Create, list, delete VMs<br><br> Start, stop, restart VMs | Create, list, delete all VM resources including logical networks, VM images, and storage paths |
36-
| Azure Local VM Contributor | Create, list, delete VMs<br><br> Start, stop, restart VMs | Create, list, delete all VM resources except logical networks, VM images, and storage paths |
37-
| Azure Local VM Reader | List all VMs | List all VM resources |
32+
| Azure Stack HCI Administrator | Create, list, delete VMs<br><br> Start, stop, restart VMs | Create, list, delete all VM resources including logical networks, VM images, and storage paths |
33+
| Azure Stack HCI VM Contributor | Create, list, delete VMs<br><br> Start, stop, restart VMs | Create, list, delete all VM resources except logical networks, VM images, and storage paths |
34+
| Azure Stack HCI VM Reader | List all VMs | List all VM resources |
3835

3936

4037
## Prerequisites
@@ -60,9 +57,9 @@ You can assign RBAC roles to user via the Azure portal. Follow these steps to as
6057

6158
1. On the **Role** tab, select an RBAC role to assign and choose from one of the following builtin roles:
6259

63-
- **Azure Local Administrator**
64-
- **Azure Local VM Contributor**
65-
- **Azure Local VM Reader**
60+
- **Azure Stack HCI Administrator**
61+
- **Azure Stack HCI VM Contributor**
62+
- **Azure Stack HCI VM Reader**
6663

6764
:::image type="content" source="./media/assign-vm-rbac-roles/add-role-assignment-2.png" alt-text="Screenshot showing Role tab during RBAC role assignment in Azure portal for your Azure Local instance." lightbox="./media/assign-vm-rbac-roles/add-role-assignment-2.png":::
6865

0 commit comments

Comments
 (0)