Architecture Resources in Azure Resource Manager -


we developing applications in .net , deploying them azure app services. have multi-tier environment (qa/stg/prod). in order replicate same environments using slots. however, issue slots developers has access qa slot able view/modify stg / prod slot settings. want segregate authorization where-in users should able publish apps on qa. should still use slots or go separate web apps?

as suggested in 1 of comments can use rbac (role based access control) control user permissions on web app/slots.

azure rbac has 3 basic roles apply resource types:

  • owner has full access resources including right delegate access others.
  • contributor can create , manage types of azure resources can’t grant access others.
  • reader can view existing azure resources.

so, add developers reader webapp , contributor 1 of slots. prevent web app changes

further, can customize rbac suit requirements. can create role custom refer article: https://azure.microsoft.com/en-us/documentation/articles/role-based-access-control-custom-roles/


Comments

Popular posts from this blog

amazon web services - S3 Pre-signed POST validate file type? -

c# - Check Keyboard Input Winforms -