SOLVED

Is there a Role in Azure Portal to assign users to Applications in WVD Spring Update?

%3CLINGO-SUB%20id%3D%22lingo-sub-1722157%22%20slang%3D%22en-US%22%3EIs%20there%20a%20Role%20in%20Azure%20Portal%20to%20assign%20users%20to%20Applications%20in%20WVD%20Spring%20Update%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1722157%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20testing%20the%20WVD%20Spring%20update.%20Is%20there%20a%20role%20that%20I%20can%20give%20our%20HelpDesk%20to%20assign%20users%20to%20Applications%3F%20I%20do%20not%20want%20them%20to%20manage%20the%20App%20Pool%2C%20just%20the%20Assignments.%20I%20gave%20one%20of%20them%20Contributor%20in%20the%20Pool%2C%20but%20I%20know%20that%20is%20too%20much%20access.%20The%20error%20she%20gets%20when%20clicking%20on%20Assignments%20is%3A%20%3CSTRONG%3Edoes%20not%20have%20authorization%20to%20perform%20action%20'Microsoft.Authorization%2FroleAssignments%2Fwrite'%20over%20scope.%20%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EDenise%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1846267%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20there%20a%20Role%20in%20Azure%20Portal%20to%20assign%20users%20to%20Applications%20in%20WVD%20Spring%20Update%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1846267%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F39314%22%20target%3D%22_blank%22%3E%40Denise%20Child%3C%2FA%3E%3A%20See%20here%20the%20admin%20permissions%20required%20to%20manage%20objects.%20Let%20us%20know%20if%20you%20couldn't%20find%20this%20in%20our%20documentation%20and%20where%20you%20would%20have%20expected%20this%20one.%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Ffaq%23what-are-the-minimum-admin-permissions-i-need-to-manage-objects%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Ffaq%23what-are-the-minimum-admin-permissions-i-need-to-manage-objects%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

We are testing the WVD Spring update. Is there a role that I can give our HelpDesk to assign users to Applications? I do not want them to manage the App Pool, just the Assignments. I gave one of them Contributor in the Pool, but I know that is too much access. The error she gets when clicking on Assignments is: does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope.

 

Thanks,

Denise

2 Replies
best response confirmed by Eva Seydl (Microsoft)
Solution

@Denise Child: See here the admin permissions required to manage objects. Let us know if you couldn't find this in our documentation and where you would have expected this one. https://docs.microsoft.com/en-us/azure/virtual-desktop/faq#what-are-the-minimum-admin-permissions-i-...