What RBAC Permissions are required to run az webapp config set command

James Bennett 20 Reputation points
2024-09-13T12:00:33.3433333+00:00

I'm trying to give a user SSH access following this document https://video2.skills-academy.com/en-us/azure/app-service/configure-linux-open-ssh-session?pivots=container-linux

The command az webapp config requires a physical login which I have done by creating a user and assigning the Website Contributor role. This role has way too many permissions and can restart the Web App etc, when all they need is to be able to SSH into the App to deploy code. Is there a minimum role to run the command 'az webapp config'

Thanks in advance

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,902 questions
0 comments
Accepted answer
  1. VenkateshDodda-MSFT 21,651 Reputation points Microsoft Employee
    2024-09-16T05:41:50.4+00:00

    @James Bennett Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

    I understand that you are looking for minimum RBAC role to enable remote debugging on app service using 'az webapp config set' cmdlet.

    If my understanding is correct, then you can create a customer role with this permission 'Microsoft.Web/sites/config/Write' so that particular user can update the configuration of the app service.

    You can also refer to this documentation for more permissions available at resource provider level.

    Hope this help! Let me know if you have any further questions on this.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.