Update custom-roles-portal.md
The following should be added in this page, too, for better clarity. Because not everybody is aware of other page that has this info.
[!NOTE]
You can clone the baseline permissions from a custom role but you can't clone a built-in role.
@azarboon : Thanks for your contribution! The author(s) have been notified to review your proposed change.
Learn Build status updates of commit 7fccff4:
:white_check_mark: Validation status: passed
| File | Status | Preview URL | Details |
|---|---|---|---|
| articles/role-based-access-control/custom-roles-portal.md | :white_check_mark:Succeeded |
For more details, please refer to the build report.
For any questions, please:
- Try searching the learn.microsoft.com contributor guides
- Post your question in the Learn support channel
@rolyon
Can you review the proposed changes?
Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged" @MicrosoftDocs/public-repo-pr-review-team
Hi @azarboon Thanks for your contribution. For Azure roles in Azure RBAC, you can clone baseline permissions for both custom and built-in roles. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-3-basics For Microsoft Entra roles, you can clone the baseline permissions from a custom role but you can't clone a built-in role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create#create-a-role-in-the-microsoft-entra-admin-center I don't think this note fits in the Azure RBAC docs. Can you provide more info about your scenario? thanks
Learn Build status updates of commit f4b2024:
:white_check_mark: Validation status: passed
| File | Status | Preview URL | Details |
|---|---|---|---|
| articles/role-based-access-control/custom-roles-portal.md | :white_check_mark:Succeeded |
For more details, please refer to the build report.
For any questions, please:
- Try searching the learn.microsoft.com contributor guides
- Post your question in the Learn support channel
Hi @azarboon Thanks for your contribution. For Azure roles in Azure RBAC, you can clone baseline permissions for both custom and built-in roles. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-3-basics For Microsoft Entra roles, you can clone the baseline permissions from a custom role but you can't clone a built-in role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create#create-a-role-in-the-microsoft-entra-admin-center I don't think this note fits in the Azure RBAC docs. Can you provide more info about your scenario? thanks
@rolyon thanks for the comment. Let me clarify:
Firstly, I must admit that I confused RBAC role vs Entra role even though I already checked this page of the doc. I don't claim to be expert in Entra so I'm still learning. But I'm sure some other non-experts can encounter the same issue.
Originally, I opened this PR because this is one of the questions which is asked in Azure Certification Exam. Unfortunately, googling it isn't very helpful (for rookies who don't have existing knowledge). Googling "azure clone role" brings up this page. Also, I had to interpret the step 3 (which you linked) to get my answer. After your comment, I googled “azure clone entra role”, the other page (which has the answer) is the FOURTH result. Please bear in mind that I saw your comment here so I was actively looking for that page. I doubt this is the case for many rookies.
Anyway, current way the information is presented, is confusing to say the least. I've edited the PR to incorporate your comment. I believe a comprehensive and clear note is needed to inform readers about the differences of cloning between these two types of roles.
@rolyon
Can you review this old PR and determine whether it needs to be closed or merged?
@rolyon - Could you review the latest response on this old PR?
I sent an email to the content owner today.
@MicrosoftDocs/public-repo-pr-review-team
I sent an email to the content owner today.
@MicrosoftDocs/public-repo-pr-review-team
I sent an email to the content owner today.
@MicrosoftDocs/public-repo-pr-review-team
I sent a Teams message to the content owner today.
@MicrosoftDocs/public-repo-pr-review-team
I sent an email to the content owner today.
@MicrosoftDocs/public-repo-pr-review-team
Hi @azarboon Thanks for your contribution. The team made some updates to this doc and also to the custom roles doc in Entra. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create Hopefully this makes more clear. Let us know if you have additional feedback. thanks
#please-close