search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.24k stars 21.41k forks source link

built-in role-based access control #63233

Closed AbhishekShaha closed 4 years ago

AbhishekShaha commented 4 years ago

Hi,

The first note in the link here : https://docs.microsoft.com/en-us/azure/postgresql/howto-hyperscale-create-users points to general RBAC documentation(So that means built in role is supported for HS(citus)? )

In security baseline documentation for HS:
https://docs.microsoft.com/en-us/azure/postgresql/postgresql-hyperscale-security-baseline#identity-and-access-control

"Hyperscale (Citus) does not support built-in role-based access control, but you can create custom roles based on specific resource provider operations."

Can I suggest the correction in the note or pointing to correct documentation?

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

NavtejSaini-MSFT commented 4 years ago

@AbhishekShaha We are checking this and will get back to you.

NavtejSaini-MSFT commented 4 years ago

@AbhishekShaha The note is as stated below: The term "users" refers to users within a Hyperscale (Citus) server group. To learn instead about Azure subscription users and their privileges, visit the Azure role-based access control (Azure RBAC) article or review how to customize roles.

It states the users mentioned in document are only valid for Hyperscale Citus server group and doesn't correspond to RBAC roles Azure subscription can be used to create. Both the note and the second document also gives the details on creating custom roles which both mentions are applicable to Hyperscale citus.

If you still have a question, please provide more details to take this further.

NavtejSaini-MSFT commented 4 years ago

@AbhishekShaha Please convey if you need any further help regarding this.

NavtejSaini-MSFT commented 4 years ago

@AbhishekShaha At this time we are going ahead and closing this thread. If you have any other questions or concern please check back to us.

AbhishekShaha commented 4 years ago

Hi @NavtejSaini-MSFT sorry for late response, all good for now. Thank You.