开启和关闭虚拟机的权限-Environment Azure [英] Permission to power on and off virtual machine - environment azure

问题描述

大家好！我的问题是:

我有一个拥有多个虚拟机的帐户.我能以某种方式-授予另一用户打开/关闭我的虚拟机的权限而没有暴露所有权限的情况(我的意思是-不要向门户授予权限等)

I have an account in azure with multiple virtual machines. Can I somehow - give a permission to another user to turn on\off one of my virtual machine without exposing all permissions (I mean - do not give permission to the portal, etc.)

是否可以编写脚本来从没有特殊特权的任何计算机上打开VM?

Is it possible to write a script that turns a VM from any computer without special privileges?

非常感谢

此论坛非常方便且非常有效，再次感谢

This forum is very convenient and very effective, thanks again

推荐答案

 您可以研究基于Azure角色的访问控制(RBAC).
通过基于Azure角色的访问控制，您可以通过在订阅或资源组或单个资源级别上为Azure AD用户，组和服务分配角色，来向他们授予适当的访问权限.分配的角色定义访问级别 用户，组或服务在Azure资源上拥有的资源.
参考: https://azure.microsoft.com/zh-CN/documentation/articles/role-based-access-control-configure/
 
关于无法在没有特殊特权的情况下从任何计算机打开VM的脚本的问题，您将必须添加帐户并提供凭据才能通过PowerShell访问任何资源.
 
 感谢您对论坛的反馈.
 让我们知道您是否有任何疑问.
 
问候，
Nithin Rathnakar

 You can look into Azure Role Based Access Control (RBAC).
 Azure role-based access control allows you to grant appropriate access to Azure AD users, groups, and services, by assigning roles to them on a subscription or resource group or individual resource level. The assigned role defines the level of access that the users, groups, or services have on the Azure resource.
 Refer: https://azure.microsoft.com/en-in/documentation/articles/role-based-access-control-configure/
 
 Regarding your question on a script that turns a VM on from any computer without special privileges is not possible, you will have to add the account and provide credentials to access any resource via PowerShell.
 
 Thank you for your feedback on the forum.
 Let us know if you have any questions.
 
Regards,
Nithin Rathnakar

这篇关于开启和关闭虚拟机的权限-Environment Azure的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！