Advanced Clusters

Back Next

Configure permissions for Microsoft Azure

In a Microsoft Azure environment, create a managed identity and a custom role.

Complete the following steps:

Disable the firewall on the Secure Agent machine.

In Azure, create a managed identity named agent_identity. You can use an existing system-assigned managed identity or create a user-assigned managed identity. If you create a user-assigned managed identity, disable the system-assigned managed identity.

For instructions about creating a managed identity, refer to the Microsoft Azure documentation.

Create a custom role named agent_role with the following role definition:

{
   "properties":{
      "roleName":"agent_role",
      "description":"",
      "assignableScopes":[
         "/subscriptions/<subscription ID>/resourceGroups/<storage_resource_group>"
      ],
      "permissions":[
         {
            "actions":[
               "Microsoft.Storage/storageAccounts/read",
               "Microsoft.Storage/storageAccounts/write",
               "Microsoft.Storage/storageAccounts/listKeys/action"
            ],
            "notActions":[
               
            ],
            "dataActions":[
               
            ],
            "notDataActions":[
               
            ]
         }
      ]
   }
}

Assign the custom role agent_role to the managed identity named agent_identity.

Assign the managed identity agent_identity to the VM where the Secure Agent is installed.

Rename Saved Search

Table of Contents

Advanced Clusters

Advanced Clusters

Configure permissions for Microsoft Azure

Configure permissions for Microsoft Azure