Book Image

Building Hybrid Clouds with Azure Stack

Book Image

Building Hybrid Clouds with Azure Stack

Overview of this book

Azure Stack is all about creating fewer gaps between on-premise and public cloud application deployment. Azure Stack is the logical progression of Microsoft Cloud Services to create a true hybrid cloud-ready application. This book provides an introduction to Azure Stack and the cloud-first approach. Starting with an introduction to the architecture of Azure Stack, the book will help you plan and deploy your Azure Stack. Next, you will learn about the network and storage options in Azure Stack and you'll create your own private cloud solution. Finally, you will understand how to integrate public cloud using the third-party resource provider. After reading the book, you will have a good understanding of the end-to-end process of designing, offering, and supporting cloud solutions for enterprises or service providers.
Table of Contents (19 chapters)
Title Page
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface

Defining Azure Stack role based access


Azure Stack RBAC is a built-in Azure Stack permission service which enables fine-grained access management for Azure Stack resources. The following basic built-in roles are available with Azure Stack:

  • Owner: Has full access to all resources including the right to delegate access to others
  • Contributor: Can create and manage all types of Azure Stack resources but cannot grant access to others
  • Reader: Can view existing Azure Stack resources

RBAC is used to grant specific access to resources and configurations if needed, for example, network settings, without access to other resource settings. It is possible to grant custom permissions and access to specific operations to persons and departments in charge.

Custom RBAC-roles can be set on subscription, resource group, and resource level, the role will be inherited to the child resources. Azure Stack RBAC-roles can be managed by Azure Stack ARM portal, PowerShell (the Azure Stack PowerShell cmdlets are needed...