question

KamalBernard avatar image
0 Votes"
KamalBernard asked KamalBernard answered

Question about RBAC in Azure

Can we use RBAC to ensure that only VM's for a Particular SKU can be launched from the Azure Account?

azure-virtual-machinesazure-rbac
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I am not sure which control exactly you need but if it is only about launching the VM the this is covered. You can Add or remove Azure role assignments to users as explain in the following document:

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Id this cover your needs or you need something else in addition?

0 Votes 0 ·
ManuPhilip avatar image
2 Votes"
ManuPhilip answered ManuPhilip commented

Hello @KamalBernard-9210,


I think, you can try a mix of Azure Policy and RBAC to achieve this requirement. See the policy definition available to limit the SKUs as below 10196-policy.png


Here, you can set exclusions for this policy for your selected resource groups at this same page


10117-exclu.png


In RBAC, you can set access for the selected accounts to control the resources in selected RGs only


Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion


Regards,


Manu



policy.png (31.4 KiB)
exclu.png (21.2 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@KamalBernard-9210

I just wanted to check in and see if ManuPhilip's post helped answer your question or if you had any other questions.

Thank you for your time!



Please let us know if any of these answers helped resolve your question. If so, please remember to "mark as answer" so that others in the community facing similar issues can easily find a solution.

0 Votes 0 ·

Hello @KamalBernard-9210,
Any update on this post?


If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.


Thanks,
Manu


0 Votes 0 ·
KamalBernard avatar image
0 Votes"
KamalBernard answered

Thank you for the information and i will mark it as answered. Thank you again

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KamalBernard avatar image
0 Votes"
KamalBernard answered

Thank you for the information and i will mark it as answered. Thank you again

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.