Skip to content

Commit

Permalink
Azure RBAC
Browse files Browse the repository at this point in the history
  • Loading branch information
chen.xiaojie 陳暁傑 committed May 15, 2024
1 parent dd843cb commit 615a8a6
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions 230. Cloud/Azure/Security/Azure RBAC/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@ Azure 的 **Access management** 有三种 Role

> **Microsoft Entra admin roles** are used to manage resources in Microsoft Entra ID, such as users, groups, and domains. These roles are defined for the Microsoft Entra tenant at the root level of the configuration.
## 功能
## 1. 权限提升

- 默认情况下,全局管理员(Global Administrator)没有权限访问 subscription、management groups 下的资源。要 subscription 的管理员在 **Access control (IAM)** 下,赋予权限全局管理员才能访问。
默认情况下,全局管理员(Global Administrator)没有权限访问 subscription、management groups 下的资源。要 subscription 的管理员在 **Access control (IAM)** 下,赋予权限全局管理员才能访问。

但全局管理员通过 [权限提升](./Global%20Administrator/Elevate%20access.md) 可以访问所有 subscriptions。
但全局管理员通过 [权限提升(Elevate access)](./Global%20Administrator/Elevate%20access.md) 可以访问所有 subscriptions。

0 comments on commit 615a8a6

Please sign in to comment.