liveBook · Manning

Azure role

As explained in Azure Security

An Azure role is a defined set of permissions that controls what an identity can do to Azure resources.

An Azure role is a defined set of permissions that controls what an identity can do to Azure resources. Privileged Identity Management (PIM) applies governance by discovering protected resources, configuring role settings, assigning roles, and activating assignments. section 2.6.2

Configure Azure roles for PIM in four stages:

  • Discover resources by opening Azure AD Privileged Identity Management, selecting Azure Roles, choosing a subscription, and managing the resource. section 2.6.2
  • Configure role settings by opening Azure Resources, selecting a subscription, choosing a role, editing its settings, and updating activation, assignment, or notification options. section 2.6.2
  • Assign and activate Azure roles for the identities that should assume them. section 2.6.2

How Azure Security covers it

How deep it goes
Explains a four-step PIM procedure through portal actions, but does not detail individual permission definitions or assignment behavior.
Examples
Uses a subscription onboarding sequence and Virtual Machine Administrator Login as a role-settings example.
What it assumes
Assumes access to the Azure portal with a role such as Owner or User Access Administrator.
What you can do after
Operate PIM by discovering subscriptions, configuring Azure role settings, assigning roles, and activating assignments.
How it connects
Connects Azure roles with Privileged Identity Management, Azure AD roles, privileged access groups, subscriptions, and Azure resources.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.