Blog Post

Azure PaaS Blog
8 MIN READ

Usage of Custom RBAC roles in Azure API Management

mithilarao's avatar
mithilarao
Icon for Microsoft rankMicrosoft
Aug 01, 2020
  Overview of Built-In RBAC roles in Azure API Management   Azure API Management relies on Azure Role-Based Access Control (RBAC) to enable fine-grained access management for API Management ser...
Updated Sep 15, 2020
Version 6.0
api
api management
APIM
apis
arm template
azure api management
Azure APIM
azure portal
Custom Roles
json
Jagan CR's avatar
Jagan CR
Copper Contributor
Sep 01, 2020

Hi 

Looks like something has been changed recently as you mentioned in step 8.

Scenario 2 - https://techcommunity.microsoft.com/t5/azure-paas-developer-blog/usage-of-custom-rbac-roles-in-azure-api-management/ba-p/1560571 

"

The ability to read subscription keys from products (an action which is defined as Microsoft.ApiManagement/service/products/subscriptions/read) is allowed by default for users having the 'API Management Service Reader Role'. Same is the case for navigating to the keys via APIs/subscriptions.

"

The API Management Service Reader Role' use to allow to view the API subscriptions of products , however from august 20 this feature is not available or some updates happend with new developer portal updates .

We had an user in our environment with API Management Service Reader Role' access to APIM and he was able to view the subscription keys .

Now all of sudden without any changes to permission he is not able view the keys and he can not perform the API call test from the APIM portal.

 

Would you be able to confirm , if there any changes happend recently from MS . which could have triggered API subscription key access.