Providing access to Blueprint definition

Question

I have a Blueprint in use which is scoped to a Management Group. I've assigned the blueprint in three different subscriptions beneath that MG and all works great.

I now want to give access to my Blueprint Definition to a colleague. I've tried granting him the various Blueprint roles at the MG level but he still cannot see the Blueprint. He can see the assignment, but not the Blueprint.

I went so far as to grant him the Contributor role for the MG, and yet he still does not have access to the Blueprint Definition.

What am I missing? How do I provide access to my colleague so that he can view/edit/publish my existing Blueprint Definition?

Answer 1

Hello @Tim Heikell (Affirma Consulting LLC) , thanks for your post. Sorry for the delayed response.

By "I've tried granting him the various Blueprint roles", do you mean these roles?
You may need to grant the perms at the MG and Subscription level for this to work

Let me know if issue persists. Happy to help further.

Cheers.

Answer 2

Thanks for the reply and apologize for the long delay. This slipped off of my radar but now it is back.

By 'roles' I was referring to 'Blueprint Contributor' and 'Blueprint Operator'. If I assign these roles to a user at the subscription level I would expect that user to be able to create and edit blueprints as well as assign and unassign blueprints, but that does not happen.

I'm unclear on how to check/assign permissions such as: Microsoft.Blueprint/blueprintAssignments/write