azure-samples / aad-dotnet-manage-users-groups-and-roles Goto Github PK

View Code? Open in Web Editor NEW

15.0 22.0 6.0 27.55 MB

Getting started on managing users and groups using C#

Home Page: https://docs.microsoft.com/en-us/dotnet/azure

License: MIT License

PowerShell 7.65% Shell 0.38% JavaScript 8.47% C# 79.12% CSS 0.21% HTML 4.13% ASP.NET 0.04%

aad-dotnet-manage-users-groups-and-roles's Introduction

page_type

languages

products

extensions

sample

csharp

azure

services	platforms
Graph-Rbac	dotnet

Getting started on managing users and groups using C#

Azure Users, Groups and Roles sample.

Create a user
Assign role to AD user
Revoke role from AD user
Get role by scope and role name
Create service principal
Assign role to service principal
Create 2 Active Directory groups
Add the user, the service principal, and the 1st group as members of the 2nd group

Running this Sample

To run this sample:

Set the environment variable AZURE_AUTH_LOCATION with the full path for an auth file. See how to create an auth file.

git clone https://github.com/Azure-Samples/aad-dotnet-manage-users-groups-and-roles.git

cd aad-dotnet-manage-users-groups-and-roles

dotnet build

bin\Debug\net452\ManageUsersGroupsAndRoles.exe

More information

Azure Management Libraries for C# Azure .Net Developer Center If you don't have a Microsoft Azure subscription you can get a FREE trial account here

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

aad-dotnet-manage-users-groups-and-roles's People

Contributors

Stargazers

Watchers

Forkers

llenroc 216giorgiy paulvill76 ramazankilimci detroitcoder1 hedonghan

aad-dotnet-manage-users-groups-and-roles's Issues

Assigning Roles to Kuberentes Cluster

Hi. I created a Kubernetes Cluster and I want to assign the role "AcrPull" to it.
I tried similar codes with yours but encountered some problems.

IRoleAssignment roleAssignment2 = authenticated.RoleAssignments
                    .Define("Roles")
                    .ForObjectId(theCluster.Id)
                    .WithBuiltInRole(BuiltInRole.Contributor)
                    .WithScope(azureRegistry.Id)
                    .Create();

There's no role named AcrPull in the field of BuiltInRole. But I found this role is listed in the official document of RBAC BuiltInRole.
I tried with role contributor, but got
The client 'xx' with object id 'yy' does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/d6622a0d-933b-4924-b2ff-ea141456872b/resourceGroups/myGroup/providers/Microsoft.ContainerRegistry/registries/MyRegistires/providers/Microsoft.Authorization/roleAssignments/Roles'.

Could you help me with the problems? Thank you very much!

No details on SP permissions to enable AAD management

This is a great sample covering the key scenarios. However, there is no explanation as to what specific permissions a service principal needs to be granted in AAD to be able to add users, modify role assignment. All attempts to get this sample to work with a custom SP were hopeless. I'm getting a cryptic CloudException back without any details whatsoever. Would appreciate your advise.

Selected subscription: xxxxx Creating an Active Directory user Test 76e11025a212d11af... Microsoft.Rest.Azure.CloudException: Exception of type 'Microsoft.Rest.Azure.CloudException' was thrown. at Microsoft.Azure.Management.Graph.RBAC.Fluent.DomainsOperations.<ListWithHttpMessagesAsync>d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Azure.Management.Graph.RBAC.Fluent.DomainsOperationsExtensions.<ListAsync>d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Azure.Management.Graph.RBAC.Fluent.ActiveDirectoryUserImpl.<CreateResourceAsync>d__23.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Azure.Management.ResourceManager.Fluent.Core.ResourceActions.Creatable4.<Microsoft-Azure-Management-ResourceManager-Fluent-Core-ResourceActions-IResourceCreator-CreateResourceAsync>d__15.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Management.ResourceManager.Fluent.Core.DAG.CreatorTaskItem1.<ExecuteAsync>d__6.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Azure.Management.ResourceManager.Fluent.Core.DAG.TaskGroupBase1.d__14.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Management.ResourceManager.Fluent.Core.Extensions.Synchronize[TResult](Func1 function) at ManageUsersGroupsAndRoles.Program.RunSample(IAuthenticated authenticated) at ManageUsersGroupsAndRoles.Program.Main(String[] args)

Link to create azureauth is broken.

Hello,

The link to the instructions for creating a azureauth file is broken. I believe it should point to the following article : https://docs.microsoft.com/en-us/dotnet/azure/dotnet-sdk-azure-authenticate?view=azure-dotnet.

Kind regards

azure-samples / aad-dotnet-manage-users-groups-and-roles Goto Github PK

aad-dotnet-manage-users-groups-and-roles's Introduction

Getting started on managing users and groups using C#

Running this Sample

More information

aad-dotnet-manage-users-groups-and-roles's People

Contributors

Stargazers

Watchers

Forkers

aad-dotnet-manage-users-groups-and-roles's Issues

Assigning Roles to Kuberentes Cluster

No details on SP permissions to enable AAD management

Link to create azureauth is broken.

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent