azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

Update custom-roles-portal.md

Open azarboon opened this issue 1 year ago • 6 comments

The following should be added in this page, too, for better clarity. Because not everybody is aware of other page that has this info.

[!NOTE]
You can clone the baseline permissions from a custom role but you can't clone a built-in role.

azarboon avatar Jun 26 '24 02:06 azarboon

@azarboon : Thanks for your contribution! The author(s) have been notified to review your proposed change.

prmerger-automator[bot] avatar Jun 26 '24 02:06 prmerger-automator[bot]

Learn Build status updates of commit 7fccff4:

:white_check_mark: Validation status: passed

File Status Preview URL Details
articles/role-based-access-control/custom-roles-portal.md :white_check_mark:Succeeded

For more details, please refer to the build report.

For any questions, please:

@rolyon

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged" @MicrosoftDocs/public-repo-pr-review-team

Court72 avatar Jun 26 '24 15:06 Court72

Hi @azarboon Thanks for your contribution. For Azure roles in Azure RBAC, you can clone baseline permissions for both custom and built-in roles. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-3-basics For Microsoft Entra roles, you can clone the baseline permissions from a custom role but you can't clone a built-in role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create#create-a-role-in-the-microsoft-entra-admin-center I don't think this note fits in the Azure RBAC docs. Can you provide more info about your scenario? thanks

rolyon avatar Jul 03 '24 17:07 rolyon

Learn Build status updates of commit f4b2024:

:white_check_mark: Validation status: passed

File Status Preview URL Details
articles/role-based-access-control/custom-roles-portal.md :white_check_mark:Succeeded

For more details, please refer to the build report.

For any questions, please:

Hi @azarboon Thanks for your contribution. For Azure roles in Azure RBAC, you can clone baseline permissions for both custom and built-in roles. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-3-basics For Microsoft Entra roles, you can clone the baseline permissions from a custom role but you can't clone a built-in role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create#create-a-role-in-the-microsoft-entra-admin-center I don't think this note fits in the Azure RBAC docs. Can you provide more info about your scenario? thanks

@rolyon thanks for the comment. Let me clarify:

Firstly, I must admit that I confused RBAC role vs Entra role even though I already checked this page of the doc. I don't claim to be expert in Entra so I'm still learning. But I'm sure some other non-experts can encounter the same issue.

Originally, I opened this PR because this is one of the questions which is asked in Azure Certification Exam. Unfortunately, googling it isn't very helpful (for rookies who don't have existing knowledge). Googling "azure clone role" brings up this page. Also, I had to interpret the step 3 (which you linked) to get my answer. After your comment, I googled “azure clone entra role”, the other page (which has the answer) is the FOURTH result. Please bear in mind that I saw your comment here so I was actively looking for that page. I doubt this is the case for many rookies.

Anyway, current way the information is presented, is confusing to say the least. I've edited the PR to incorporate your comment. I believe a comprehensive and clear note is needed to inform readers about the differences of cloning between these two types of roles.

azarboon avatar Jul 04 '24 00:07 azarboon

@rolyon

Can you review this old PR and determine whether it needs to be closed or merged?

Court72 avatar Aug 30 '24 15:08 Court72

@rolyon - Could you review the latest response on this old PR?

ShannonLeavitt avatar Oct 03 '24 15:10 ShannonLeavitt

I sent an email to the content owner today.

@MicrosoftDocs/public-repo-pr-review-team

v-ccolin avatar Nov 22 '24 08:11 v-ccolin

I sent an email to the content owner today.

@MicrosoftDocs/public-repo-pr-review-team

v-dirichards avatar Dec 19 '24 16:12 v-dirichards

I sent an email to the content owner today.

@MicrosoftDocs/public-repo-pr-review-team

v-ccolin avatar Mar 09 '25 09:03 v-ccolin

I sent a Teams message to the content owner today.

@MicrosoftDocs/public-repo-pr-review-team

ttorble avatar Apr 13 '25 09:04 ttorble

I sent an email to the content owner today.

@MicrosoftDocs/public-repo-pr-review-team

v-ccolin avatar May 01 '25 07:05 v-ccolin

Hi @azarboon Thanks for your contribution. The team made some updates to this doc and also to the custom roles doc in Entra. https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-create Hopefully this makes more clear. Let us know if you have additional feedback. thanks

rolyon avatar May 19 '25 22:05 rolyon

#please-close

rolyon avatar May 19 '25 22:05 rolyon