Reader can't seem to access DB to view

Question

Hi, I will like to do the following:

1. Allow 'Reader' access to some people for the 'resources' in my Azure Dashboard

I've followed the following https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-configure

The email was sent to some of my users prompting them to click a link in order to access but they are greeted with the following image here: https://drive.google.com/file/d/0B4JKLEARRfoEeE1tQTd4ZG5LaG8/view?usp=sharing

How do I best ensure that they can have access? Thank you.

Answer 1

Message can misslead you but everything is OK, this is Azure AD message that user is granted permissions on app but as Azure subscription isn't really app it gets confusing.

Anyway, users should log to Azure portal with credentials you granted read access and should see resources they have read access to.

---

Mustafa Toroman, Azure MVP

Answer 2

Ah, so get the users to sign up for an azure account (using the email I granted read access to), login and then see if they have access?

I'll try that out first.

Answer 3

In fact they don't have to sign up for Azure account, once you added them and they followed link in email, they should have access to Azure portal and see resources they have read access to.

---

Mustafa Toroman, Azure MVP

Answer 4

Yea tried that initially through the email sent by microsoft after I added them as 'reader'.

Just to clarify, I need not 'pay' to get the user to access as 'reader' right?

Ok, seems like it still doesn't work... hmm...

Thanks.

Answer 5

No, You don't need to pay anything for user to have read access. You don't have to pay anything to assign users admin rights to your subscription. However, any resource they create on your subscription will be billed to you.

Are those users in your Azure AD or external users? If external users, are they using private or O365 account?

---

Mustafa Toroman, Azure MVP

Answer 6

Thanks for the reply Mustafa!

Yea, understand about the resources bit.

They are external users. I didn't upgrade my Azure AD plan, so currently it's free on basic.

They are using Microsoft registered accounts (it is gmail though) - I just created 1 for myself to test.

Hmm... do you think it takes some time to get the read access (though it has been a few hours already).

Answer 7

This is what I encounter - https://drive.google.com/file/d/0B62c2JqSPAhRYm9hTldWdVpCS2M/view

Hope you or others can chip in and advice.

Thanks!

Answer 8

That is perfectly fine result. Once you log in and get this message, go to https://portal.azure.com and use same credentials to log in. User should see resource with read rights.

---

Mustafa Toroman, Azure MVP

Answer 9

@Mustafa. Thanks a lot for answering even on the weekends!

Ok it seems to work when I went to the portal to login using another email (which I sent to become 'reader'). 

Props to you and have a great week ahead!

Kelvin =)