The Desktop Virtualization Workspace Contributor role allows users to manage all aspects of workspaces. Microsoft.DesktopVirtualization/applicationgroups/read Microsoft.DesktopVirtualization/applicationgroups/*/read The Desktop Virtualization Application Group Reader role allows users to view everything in the application group and will not allow them to make any changes. Microsoft.DesktopVirtualization/hostpools/sessionhosts/readĭesktop Virtualization Application Group Reader Microsoft.DesktopVirtualization/applicationgroups/* If you want users to publish application groups to users or user groups, they'll also need the The Desktop Virtualization Application Group Contributor role allows users to manage all aspects of application groups. Microsoft.DesktopVirtualization/hostpools/read Microsoft.DesktopVirtualization/hostpools/*/read ![]() The Desktop Virtualization Host Pool Reader role allows users to view everything in the host pool, but won't allow them to make any changes. Roles to create host pools using the portal, or you can use the You will needĭesktop Virtualization Application Group Contributorĭesktop Virtualization Workspace Contributor The Desktop Virtualization Host Pool Contributor role allows users to manage all aspects of host pools, including access to resources. Microsoft.DesktopVirtualization/applicationGroups/useApplications/actionĭesktop Virtualization Host Pool Contributor Role allows users to use the applications in an application group. The Desktop Virtualization Reader role allows users to view everything in the deployment, but doesn't let them make any changes. Microsoft.Resources/subscriptions/resourceGroups/read Role to publish application groups to users or user groups. However, it doesn't grant users access to compute resources. For more information, seeĪllows users to manage all aspects of the deployment. The root scope indicates that the role is available for assignment in all scopes, for example management groups, subscriptions, or resource groups. The assignable scope for all built-in roles are set to the root scope ("/"). ![]() ![]() The built-in roles for Azure Virtual Desktop and the permissions for each one are detailed below. However, you can use the general Owner role for the service objects. Azure Virtual Desktop doesn't have a specific Owner role.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |