Comments (5)
Great, thanks for support. I am closing this issue.
from ipam.
Hi @azheaipl, thanks for reaching out!
There are many nuances to creating the required App Registrations so it's likely something was overlooked during the manual creation.
I see above that you mention that you are an Owner of the Tenant Root Group, but have you assigned the Engine Service Principal (created from the App Registration) as a Reader on the Tenant Root Group?
Also, the UI App Registration must be added under "knownClientApplications" in the Manifest of the Engine App Registration.
I'm happy to help review these configuration items with you if you'd like. Simply drop me an email to [email protected] and we can setup some time to hop on a meeting during a time that is convenient for you.
from ipam.
Hi @DCMattyG
Indeed, the Engine Service Principal was missing "Reader" role on the Tenant Root Group. It works, many thanks.
May I have another question if you don't mind :) What are consequences if we remove Directory.Read.All permission for UI App Registration? This is the only one permission which requires admin consent and we might not get it approved from our AD team.
from ipam.
That permissions is what allows you to view the list of Users/Service Principals in the UI so you can select them and add them as Admins in the IPAM platform.
NOTE: This is a permissions all users ALREADY HAVE. This is a delegated permission which means the App Registration itself doesn't have the permission, this is based on the USERS permission accessing the UI. This does not grant any higher permission than a user already has.
It might be good to read up on Delegated vs. Application permissions so you feel more comfortable with this API permission setting:
Hope that helps!
from ipam.
Excellent, so glad you were able to get everything working!
from ipam.
Related Issues (20)
- Releases and versioning HOT 1
- Add next available vNet CIDR to GUI HOT 5
- Engine 502 and seems not working HOT 6
- Provide some option to limit which principals can create reservations HOT 1
- Implement using Private endpoint HOT 4
- Reservations for External networks HOT 5
- Operation returned an invalid status code 'Forbidden HOT 4
- Support setting up IPAM at management groups other than the tenant root HOT 2
- Forward Slash in block names HOT 4
- block reservation with 2 vnets HOT 7
- Block filter in VNETS page is case sensitive HOT 3
- Welcome to Azure IPAM Discussions! HOT 1
- Deployment fails when deploying with the '-PrivateACR' HOT 4
- [BUG] Deploying with AppsOnly flag throws an error HOT 3
- Git folder is large HOT 3
- Unable to add External subnet HOT 3
- Show configured DNS Servers for a VNET HOT 1
- Do not see the vNet<> Block association option HOT 2
- Remove a Block <>vNET associations after vNET IP range change that does not fully match the Block CIDR HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ipam.