Update lab instructions for RBAC and management groups

This step goes before opening the blade.
This commit is contained in:
turibbio 2025-11-18 11:46:25 +01:00 committed by GitHub
parent 2a6199d64a
commit f2286b4293
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -67,6 +67,8 @@ In this task, you will create and configure management groups. Management groups
In this task, you will review the built-in roles and assign the VM Contributor role to a member of the Help Desk. Azure provides a large number of [built-in roles](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles). In this task, you will review the built-in roles and assign the VM Contributor role to a member of the Help Desk. Azure provides a large number of [built-in roles](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles).
>**Note:** The next step assigns the role to the **helpdesk** group. If you do not have a Help Desk group, take a minute to create it.
1. Select the **az104-mg1** management group. 1. Select the **az104-mg1** management group.
1. Select the **Access control (IAM)** blade, and then the **Roles** tab. 1. Select the **Access control (IAM)** blade, and then the **Roles** tab.
@ -77,12 +79,10 @@ In this task, you will review the built-in roles and assign the VM Contributor r
1. On the **Add role assignment** blade, search for and select the **Virtual Machine Contributor**. The Virtual machine contributor role lets you manage virtual machines, but not access their operating system or manage the virtual network and storage account they are connected to. This is a good role for the Help Desk. Select **Next**. 1. On the **Add role assignment** blade, search for and select the **Virtual Machine Contributor**. The Virtual machine contributor role lets you manage virtual machines, but not access their operating system or manage the virtual network and storage account they are connected to. This is a good role for the Help Desk. Select **Next**.
>**Did you know?** Azure originally provided only the **Classic** deployment model. This has been replaced by the **Azure Resource Manager** deployment model. As a best practice, do not use classic resources. >**Did you know?** Azure originally provided only the **Classic** deployment model. This has been replaced by the **Azure Resource Manager** deployment model. As a best practice, do not use classic resources.
1. On the **Members** tab, **Select Members**. 1. On the **Members** tab, **Select Members**.
>**Note:** The next step assigns the role to the **helpdesk** group. If you do not have a Help Desk group, take a minute to create it.
1. Search for and select the `helpdesk` group. Click **Select**. 1. Search for and select the `helpdesk` group. Click **Select**.
1. Click **Review + assign** twice to create the role assignment. 1. Click **Review + assign** twice to create the role assignment.
@ -176,3 +176,4 @@ Congratulations on completing the lab. Here are the main takeaways for this lab.