question

TimHeikellAffirmaConsultingLLC-3224 avatar image
0 Votes"
TimHeikellAffirmaConsultingLLC-3224 asked TimHeikellAffirmaConsultingLLC-3224 answered

Providing access to Blueprint definition

I have a Blueprint in use which is scoped to a Management Group. I've assigned the blueprint in three different subscriptions beneath that MG and all works great.

I now want to give access to my Blueprint Definition to a colleague. I've tried granting him the various Blueprint roles at the MG level but he still cannot see the Blueprint. He can see the assignment, but not the Blueprint.

I went so far as to grant him the Contributor role for the MG, and yet he still does not have access to the Blueprint Definition.

What am I missing? How do I provide access to my colleague so that he can view/edit/publish my existing Blueprint Definition?

azure-blueprints
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

olufemiaMSFT avatar image
0 Votes"
olufemiaMSFT answered olufemiaMSFT edited

Hello @TimHeikellAffirmaConsultingLLC-3224, thanks for your post. Sorry for the delayed response.

By "I've tried granting him the various Blueprint roles", do you mean these roles?
You may need to grant the perms at the MG and Subscription level for this to work

103089-bpdef.png

Let me know if issue persists. Happy to help further.

Cheers.



bpdef.png (29.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TimHeikellAffirmaConsultingLLC-3224 avatar image
0 Votes"
TimHeikellAffirmaConsultingLLC-3224 answered

Thanks for the reply and apologize for the long delay. This slipped off of my radar but now it is back.

By 'roles' I was referring to 'Blueprint Contributor' and 'Blueprint Operator'. If I assign these roles to a user at the subscription level I would expect that user to be able to create and edit blueprints as well as assign and unassign blueprints, but that does not happen.

I'm unclear on how to check/assign permissions such as: Microsoft.Blueprint/blueprintAssignments/write

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.