Access to Microsoft Azure web console for pmoore

NEW
Unassigned

Status

Taskcluster
Operations
2 years ago
a year ago

People

(Reporter: pmoore, Unassigned)

Tracking

Details

Attachments

(1 attachment)

(Reporter)

Description

2 years ago
I went to sign up with Microsoft Azure for a free trail to get myself an account, hoping that I'd then be able to add some kind of "Taskcluster" organisation once my Microsoft account was created.

The signup process for a Microsoft account requests credit card details from me, which I prefer not to give, as much as I trust such a reputable organisation. ;)

Is there a way I can be granted access, without needing to give my credit card details, and have access to the web portal of service offerings from Azure (much like I can log into the aws console)?

This would be useful, e.g. for browsing Azure Table storage, to get a better understanding (visualisation) of how we are using it in Taskcluster.

I see we have an account called "taskclusterdev" - do I just need a password for this account, or do I need to set up my own microsoft account? I was looking to sign in under https://portal.azure.com/.

Thanks!
Pete

P.S. I have some creds for the taskclusterdev
Ok, for future travellers, here's the docs I found: https://azure.microsoft.com/en-us/documentation/articles/active-directory-create-users/


Pretty sure there's more to do here, but we'll work through it.
(Reporter)

Comment 2

2 years ago
Created attachment 8659781 [details]
Screenshot of "No Subscriptions Found" web page

Many thanks Selena!

I can log into the account successfully, so part 1 complete. =)

I don't currently have any subscriptions, which I think prevents me from accessing existing table storage.

Attached is a screenshot of the page I get, when visiting https://manage.windowsazure.com/.

Thanks!
I added you to the "owners" group in the Roles that were available. Please try again, and let's see if you now can look at everything.
(Reporter)

Comment 4

2 years ago
Thanks Selena. I just tried again, but get same response as before (in screenshot attachment)... :/
(Reporter)

Updated

2 years ago
Flags: needinfo?(sdeckelmann)
Jonas has started looking into fine-grained access control config for Azure with support.
Flags: needinfo?(sdeckelmann)
(Reporter)

Comment 6

2 years ago
Hey Jonas,

Is there a bug for that, or can you send me details?

Thanks!
Pete
Flags: needinfo?(jopsen)
Component: Service Request → Operations
@pmoore,
There is no UI for browsing azure table storage.. Or at-least if there is I don't use it.
I have no progress on azure access at this stage yet... Honestly, I'm not hopeful it's going to be lengthy conversation.

And I'm not sure it'll be fruitful as azure access controls are pretty rudimentary. I don't think we can get per-user access credentials like AWS. I don't even think read-only access possible either.
auth.taskcluster.net can grant you access azure table using shared-access-signatures, this is to a specific table/storage-account, read-only or read-write, it's guarded by scopes.

For fooling around please use the "jungle" account, email me to have me send you access credentials,
if you would like it... auth.taskcluser.net can also issue SAS for jungle, and that scope is given widely.

@pmoore,
if you want to have a look you access the password for azure... Let's me send you an email :)
Flags: needinfo?(jopsen)

Comment 8

a year ago
@pmoore,

There is no issue. Actually there are two portal named as "Azure Service Management(ASM) - (https://manage.windowsazure.com/)" & "Azure Resource Management(ARM) - (https://portal.azure.com)" to access Microsoft Azure Cloud.
@selena gave you access of "Owner" in ARM portal where you have fine-granular control for each roles like contributor, owner, and reader as well. You can give access to any domain account in Active Directory or any hotmail accounts.
Assignee: sdeckelmann → nobody
You need to log in before you can comment on or make changes to this bug.