locked
Reader can't seem to access DB to view RRS feed

  • Question

  • Hi, I will like to do the following:

    1. Allow 'Reader' access to some people for the 'resources' in my Azure Dashboard

    I've followed the following https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-configure

    The email was sent to some of my users prompting them to click a link in order to access but they are greeted with the following image here: https://drive.google.com/file/d/0B4JKLEARRfoEeE1tQTd4ZG5LaG8/view?usp=sharing

    How do I best ensure that they can have access? Thank you.


    • Edited by Kohkoh17 Thursday, August 31, 2017 10:42 AM
    Thursday, August 31, 2017 10:41 AM

Answers

  • That is perfectly fine result. Once you log in and get this message, go to https://portal.azure.com and use same credentials to log in. User should see resource with read rights.

    Mustafa Toroman, Azure MVP

    • Marked as answer by Kohkoh17 Monday, September 4, 2017 2:18 AM
    Sunday, September 3, 2017 4:51 PM

All replies

  • Message can misslead you but everything is OK, this is Azure AD message that user is granted permissions on app but as Azure subscription isn't really app it gets confusing.

    Anyway, users should log to Azure portal with credentials you granted read access and should see resources they have read access to.


    Mustafa Toroman, Azure MVP

    Thursday, August 31, 2017 10:48 AM
  • Ah, so get the users to sign up for an azure account (using the email I granted read access to), login and then see if they have access?

    I'll try that out first.

    • Edited by Kohkoh17 Thursday, August 31, 2017 10:55 AM
    Thursday, August 31, 2017 10:51 AM
  • In fact they don't have to sign up for Azure account, once you added them and they followed link in email, they should have access to Azure portal and see resources they have read access to.

    Mustafa Toroman, Azure MVP

    Thursday, August 31, 2017 11:00 AM
  • Yea tried that initially through the email sent by microsoft after I added them as 'reader'.

    Just to clarify, I need not 'pay' to get the user to access as 'reader' right?

    Ok, seems like it still doesn't work... hmm...

    Thanks.

    Thursday, August 31, 2017 11:06 AM
  • No, You don't need to pay anything for user to have read access. You don't have to pay anything to assign users admin rights to your subscription. However, any resource they create on your subscription will be billed to you.

    Are those users in your Azure AD or external users? If external users, are they using private or O365 account?


    Mustafa Toroman, Azure MVP

    Thursday, August 31, 2017 11:23 AM
  • Thanks for the reply Mustafa!

    Yea, understand about the resources bit.

    They are external users. I didn't upgrade my Azure AD plan, so currently it's free on basic.

    They are using Microsoft registered accounts (it is gmail though) - I just created 1 for myself to test.

    Hmm... do you think it takes some time to get the read access (though it has been a few hours already).

    Thursday, August 31, 2017 11:54 AM
  • This is what I encounter - https://drive.google.com/file/d/0B62c2JqSPAhRYm9hTldWdVpCS2M/view

    Hope you or others can chip in and advice.

    Thanks!

    Friday, September 1, 2017 4:17 AM
  • That is perfectly fine result. Once you log in and get this message, go to https://portal.azure.com and use same credentials to log in. User should see resource with read rights.

    Mustafa Toroman, Azure MVP

    • Marked as answer by Kohkoh17 Monday, September 4, 2017 2:18 AM
    Sunday, September 3, 2017 4:51 PM
  • @Mustafa. Thanks a lot for answering even on the weekends!

    Ok it seems to work when I went to the portal to login using another email (which I sent to become 'reader'). 

    Props to you and have a great week ahead!

    Kelvin =)

    Monday, September 4, 2017 2:20 AM