1202391 - Access to Microsoft Azure web console for pmoore

Status: RESOLVED WONTFIX

(Taskcluster :: Operations and Service Requests, task)

Description

[Pete Moore [:pmoore][:pete]]

I went to sign up with Microsoft Azure for a free trail to get myself an account, hoping that I'd then be able to add some kind of "Taskcluster" organisation once my Microsoft account was created.

The signup process for a Microsoft account requests credit card details from me, which I prefer not to give, as much as I trust such a reputable organisation. ;)

Is there a way I can be granted access, without needing to give my credit card details, and have access to the web portal of service offerings from Azure (much like I can log into the aws console)?

This would be useful, e.g. for browsing Azure Table storage, to get a better understanding (visualisation) of how we are using it in Taskcluster.

I see we have an account called "taskclusterdev" - do I just need a password for this account, or do I need to set up my own microsoft account? I was looking to sign in under https://portal.azure.com/.

Thanks!
Pete

P.S. I have some creds for the taskclusterdev

Comment 1

[Selena Deckelmann :selenamarie :selena]

Ok, for future travellers, here's the docs I found: https://azure.microsoft.com/en-us/documentation/articles/active-directory-create-users/


Pretty sure there's more to do here, but we'll work through it.

Comment 2

[Pete Moore [:pmoore][:pete]]

Attachment: Screenshot of "No Subscriptions Found" web page

Many thanks Selena!

I can log into the account successfully, so part 1 complete. =)

I don't currently have any subscriptions, which I think prevents me from accessing existing table storage.

Attached is a screenshot of the page I get, when visiting https://manage.windowsazure.com/.

Thanks!

Comment 3

[Selena Deckelmann :selenamarie :selena]

I added you to the "owners" group in the Roles that were available. Please try again, and let's see if you now can look at everything.

Comment 4

[Pete Moore [:pmoore][:pete]]

Thanks Selena. I just tried again, but get same response as before (in screenshot attachment)... :/

Comment 5

[Selena Deckelmann :selenamarie :selena]

Jonas has started looking into fine-grained access control config for Azure with support.

Comment 6

[Pete Moore [:pmoore][:pete]]

Hey Jonas,

Is there a bug for that, or can you send me details?

Thanks!
Pete

Comment 7

[Jonas Finnemann Jensen (:jonasfj)]

@pmoore,
There is no UI for browsing azure table storage.. Or at-least if there is I don't use it.
I have no progress on azure access at this stage yet... Honestly, I'm not hopeful it's going to be lengthy conversation.

And I'm not sure it'll be fruitful as azure access controls are pretty rudimentary. I don't think we can get per-user access credentials like AWS. I don't even think read-only access possible either.
auth.taskcluster.net can grant you access azure table using shared-access-signatures, this is to a specific table/storage-account, read-only or read-write, it's guarded by scopes.

For fooling around please use the "jungle" account, email me to have me send you access credentials,
if you would like it... auth.taskcluser.net can also issue SAS for jungle, and that scope is given widely.

@pmoore,
if you want to have a look you access the password for azure... Let's me send you an email :)

Comment 8

[Raghuram Korukonda]

@pmoore,

There is no issue. Actually there are two portal named as "Azure Service Management(ASM) - (https://manage.windowsazure.com/)" & "Azure Resource Management(ARM) - (https://portal.azure.com)" to access Microsoft Azure Cloud.
@selena gave you access of "Owner" in ARM portal where you have fine-granular control for each roles like contributor, owner, and reader as well. You can give access to any domain account in Active Directory or any hotmail accounts.