Permissions

Note

This guide was created with the language setting set to English. Therefore, the screenshots shown may differ from your device if you have a different language set.

Permanent Role

Before a role can be assigned, the resource on which the permission is to be granted must first be navigated to. In this guide, additional rights are granted directly on the Subscription.

1. Log in to the Portal.

   

2. Navigate to the Subscription.

   

3. Select Access control (IAM) in the left menu.

   

4. Select the Add button and then Add role assignment.

   

5. In the Role tab, select the desired role. In this example, another user is granted access to all resources within a Subscription. The role can be found under Privileged administrator roles with the name Unibe-Application-Owner (mg-unibe). Then select Next.

   

6. In the Members tab, select the user. Select Select Members and choose the person in the popup. Then select Next.

   

7. In the Assignment type tab, additional conditions for the role assignment can be set. In this example, the role is assigned permanently. Under Assignment type, Active is selected and under Assignment duration, Permanent. Then select Review + assign.

   

8. Review the details and select Review + assign.

   

Role On Request

In the previous example, a permanent permission was granted. A role can, however, also be assigned with additional conditions:

• A role can be assigned for a specific period of time.
• A role can be assigned so that it must first be requested (similar to the PIM group for Subscription owners).

Caution

A role on request cannot be assigned to service accounts.

1. Log in to the Portal.

   

2. Navigate to the Subscription.

   

3. Select Access control (IAM) in the left menu.

   

4. Select the Add button and then Add role assignment.

   

5. In the Role tab, select the desired role. In this example, another user is granted access to all resources within a Subscription. The role can be found under Privileged administrator roles with the name Unibe-Application-Owner (mg-unibe). Then select Next.

   

6. In the Members tab, select the user. Select Select Members and choose the person in the popup. Then select Next.

   

7. In the Assignment type tab, additional conditions for the role assignment can be set. In this example, the role is assigned on request. Under Assignment type, Eligible (Recommended) is selected and under Assignment duration, Time bound. Then the validity period of the role assignment is defined. The validity period determines the time frame during which the role can be requested. Then select Review + assign.

   

8. Review the details and select Review + assign.

   

Requesting a Role

How to request a role is described in the PIM tutorial.