Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.72k stars 973 forks source link

Feature Request Perquisites section is missing prerequisites #263

Closed noendscripting closed 3 years ago

noendscripting commented 4 years ago

Please add full list requirements such as subscription RBAC requirements etc to the perquisites section

krnese commented 4 years ago

Is this for moving the subscription into the management groups you are creating? If you follow the pre-reqs and assign Owner at the tenant root as part of the bootstrapping process, that permission will be inherited to the subscriptions as well. Did you run into any issues?

noendscripting commented 4 years ago

Hi Kristian

My thoughts are if we are going to have a prerequisites section then we should make it as compressive as possible. Where we simply list requirements or add links to documents that explain how to full fill these prerequisites. A good example would be our MS Graph Api referencehttps://docs.microsoft.com/en-us/graph/api/user-list?view=graph-rest-1.0&tabs=http#permissions which lists permissions required to call an API

Michael Resnick | Premier Field Engineer - US PFE - East Region michael.resnick@microsoft.com|mailto:michael.resnick@microsoft.com%7C (o) 980.776.7793 (c) 917.696.1690 Premier Support: 1.800.936.3100 | Premier Online: https://premier.microsoft.comhttps://premier.microsoft.com/ [cid:image001.jpg@01D69D6F.735ACEB0] https://twitter.com/AzureSupporthttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FAzureSupport&data=02%7C01%7CMichael.Resnick%40microsoft.com%7C64ccece7594a4936f83808d7a8f9380f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637163660759497841&sdata=1sFlBVPr%2B9nm%2F%2BJNHTzBkr%2FsLOmgLAksNstTqNg7nqQ%3D&reserved=0 https://twitter.com/MSFT365Statushttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FMSFT365Status&data=02%7C01%7CMichael.Resnick%40microsoft.com%7C64ccece7594a4936f83808d7a8f9380f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637163660759497841&sdata=S05MkNQN5RJN5%2Fo59OtO88m%2B9wL1xDbJMJuJ2l7YCnI%3D&reserved=0 If you have any feedback about my work, please let either myself or my manager, Daryl Tutton (Daryl.Tutton@microsoft.commailto:Daryl.Tutton@microsoft.com)

[cid:image003.png@01D69D72.FB9A14E0] [cid:image004.png@01D69D6F.735ACEB0]

From: Kristian Nese notifications@github.com Sent: Thursday, October 8, 2020 12:31 PM To: Azure/Enterprise-Scale Enterprise-Scale@noreply.github.com Cc: Mike Resnick (CE) Michael.Resnick@microsoft.com; Author author@noreply.github.com Subject: Re: [Azure/Enterprise-Scale] Feature Request Perquisites section is missing prerequisites (#263)

Is this for moving the subscription into the management groups you are creating? If you follow the pre-reqs and assign Owner at the tenant root as part of the bootstrapping process, that permission will be inherited to the subscriptions as well. Did you run into any issues?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FAzure%2FEnterprise-Scale%2Fissues%2F263%23issuecomment-705684709&data=04%7C01%7CMichael.Resnick%40microsoft.com%7C336693fd1b7a4b3d063a08d86ba79292%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637377714751854173%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=dBppH%2BUMP6k10o0Mjt2JnZe3mEUjqhahLi3N6aIY7%2Bc%3D&reserved=0, or unsubscribehttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAGNHKNN5AHKC62YPRTLPNQLSJXSNDANCNFSM4SI47Z2A&data=04%7C01%7CMichael.Resnick%40microsoft.com%7C336693fd1b7a4b3d063a08d86ba79292%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637377714751854173%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=o1G107iRa%2B8XLU5h0u04vYtJpkbBqWFM1k9k6pz9WDc%3D&reserved=0.

krnese commented 4 years ago

What is missing from the current pre-reqs?