在其他Azure订阅上管理/调试虚拟机 [英] Manage / debug virtual machines on someone elses azure subscription

问题描述

我有两个用户，A和B.两个用户都有azure订阅.用户A创建了一个运行某些软件的VM，但希望向用户B授予访问权限以管理/调试该虚拟机.

I have two users, A and B. Both users have azure subscriptions. User A creates a VM, running some software, but wants to grant User B access to administer / debug this virtual machine.

我们已在用户A的订阅中将用户B添加为虚拟机的所有者，但他们无法看到该虚拟机.

Weve added User B as an owner of the virtual machine on User A's subcription, but they are not able to see the virtual machine.

1. 有没有办法做到这一点?
2. 如果有，我们要去做吗 正确的方法吗?

1. Is there a way of doing this?
2. If there is, are we going about it the right way?

推荐答案

有没有办法做到这一点?

Is there a way of doing this?

是的，我们可以这样做，我们可以邀请用户B加入经理用户A资源组.

Yes, we can do this, we can invite user B to manager user A resource group.

我们正在按照正确的方式进行操作吗?

are we going about it the right way?

我们可以通过Azure门户做到这一点.

We can do it via Azure portal.

1. 通过Azure门户邀请来宾，如下所示:

1.Invite a guest via Azure portal, like this:

完成后，Azure将向该电子邮件地址发送一封电子邮件，用户B应该接受该电子邮件，然后我们可以找到用户B添加到您的Azure AD用户列表中.

After that completed, Azure will send a email to that email address, user B should accept it, then we can find user B add to your Azure AD users list.

2. 授予此帐户的资源组权限，如下所示:

2.Grant resource group permission to this account,like this:

此后，用户B重新加载Azure门户，然后在其门户中找到另一个目录，我们可以通过门户对其进行更改.转到该目录，用户B将找到资源组.

After that, user B reload Azure portal, then will find another directory in his portal, we can change it via portal. change to that directory, user B will find the resource group.

我们可以通过Azure门户更改另一个目录，如下所示:

We can change another directory via Azure portal like this:

通过这种方式，我们可以从您的Azure AD中共享一个Azure资源组给另一个用户.

In this way, we can share an Azure resource group to another user out of your Azure AD.

关于Azure内置角色，请参考以下

About Azure built-in roles, please refer to this article.

顺便说一句，正如彼得所说，我们不能使用用户B帐户登录您的Azure VM.

By the way, as Peter said, we can't use user B account to login your Azure VM.

这篇关于在其他Azure订阅上管理/调试虚拟机的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！