Azure Active Directory contd
- Authorization in Azure is acheived by Role assignment to user principal
- Exact Permissions at subscription/resource group/resource level is set by Role and Microsoft has pre-defined roles
-
Azure organizes resources in the following way
- Every subscription will have resource providers which provide resource and actions.
- New updates will lead to new API Versions
- Refer Here for official docs
- When we want to give permissions we need to know resource type and actions.
- Match Service to resource provider Refer Here
- Figure out operations by resource provider Refer Here
Find operations to create, view and update virtual networks
- Find the provider
- Refer Here and search for service
- Now Find the resource Type
Microsoft.Network/virtualNetworks - Now search for operations in the following page Refer Here
Find the operations to view cosmos databases
- provider:
Microsoft.DocumentDB - Options
Microsoft.DocumentDB/databaseAccounts
Microsoft.DocumentDB/mongoClusters
