如何限制谁可以修改集合的RU/s/吞吐量 [英] How to restrict who can modify RU/s / throughput for a collection

问题描述

你好- 

在我们公司中，我们有一个小组代表开发人员调配云资源.设置好之后，我们通常会向开发人员提供贡献者级别的角色，以创建收藏集并管理该资源.

In our company, we have a group that provisions cloud resources on behalf of developers.  Once provisioned, we normally provide a contributor level role to the developer to create collections and manage that resource.

效果很好；但是，我们一直在发现开发人员不必要地更改吞吐量(RU/s)设置并产生成本的情况.我们想特别在非产品环境中限制这一点.

That works well; however, we've been finding cases where developers change the throughput (RU/s) setting and incurring costs unnecessarily.  We'd like to limit this especially for non-prod environments.

似乎没有任何默认角色允许开发人员读取/写入/修改文件，管理存储过程等，同时限制其设置吞吐量值的能力.我还尝试了自定义RBAC角色，但还没有 在那里也找到了解决方案.

It doesn't appear there are any default roles that would allow developers to read/write/modify files, manage stored procedures, etc. while limiting their ability to set the throughput value.  I've also experimented with custom RBAC roles but haven't found a solution there either.

我希望论坛中的某人可能对此有所管理.

I'm hoping someone in the forum may have some insight on how this could be managed.

预先感谢！

推荐答案

MGFink，

Hi MGFink,

在Azure门户中，有一个称为基于角色的访问控制的概念:

In the Azure Portal, there is a concept called Role-Based access control: What is role-based access control (RBAC)?

With this you can control resources in the Azure Portal. From the cmd line though, it is controlled by the Read-Write and Read-Only keys. A user with a Read-Write key can run queries to read and write data as long as the key they are using is active. If you happen to rotate the keys, then you cut-off access to that client but also to all other clinets that have been issued a copy of that same key. You will need to update all valid clients with the new key to access the database.

如果您还有其他问题，请告诉我们.

Please let us know if you have additional questions.

此致

迈克

这篇关于如何限制谁可以修改集合的RU/s/吞吐量的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！