question

furqan avatar image
1 Vote"
furqan asked JamesTran-MSFT commented

Reports reader role

Hi,

Just to clarify , apart for user can we assign "Report reader" role apart to Resource Group or VM (VM is assigned with system assigned managed identity)

@SadiqhAhmed-MSFT

regards,
Furqhan

azure-active-directoryazure-rbac
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered JamesTran-MSFT commented

@furqan
Thank you for your post!

Assigning the Report Reader built-in role to a Resource Group or VM isn't possible, because the Report Reader is currently an Azure AD role-based access control (RBAC) role.


Azure AD RBAC:
Azure AD built-in and custom roles operate on concepts similar to Azure RBAC. However, The difference between these two role-based access control systems are:

  • Azure AD RBAC roles control access to Azure AD resources such as users, groups, and applications using the Microsoft Graph API

  • Azure RBAC roles control access to Azure resources such as virtual machines or storage using Azure Resource Management

Azure AD RBAC Scope
142269-image.png


Azure RBAC:
Azure RBAC is an authorization system built on Azure Resource Manager (ARM) that provides fine-grained access management of Azure resources.

Azure RBAC Scope
142268-image.png


Additional 3rd party Link:
Difference Between Azure AD Roles And Role-Based Access Control (RBAC)


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.


image.png (15.9 KiB)
image.png (23.0 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@furqan
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

1 Vote 1 ·

Thank you @JamesTran-MSFT

I have a doubt on proximity group,
Which resources can you place in Proximity group
Can we place
- virtual machine?
- Disk?
- virtual network?
- public IP address?

regards,
Furqhan

0 Votes 0 ·

@furqan
Thank you for the follow up on this!

When it comes to Proximity placement groups, it looks like you can only apply these to VMs and VM Scale Sets. For more info.

145599-image.png



If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

1 Vote 1 ·
image.png (41.8 KiB)