能否在Azure门户查看资源组的托管服务注册定义及分配?
问题
当前环境使用Azure AD B2C,已按文档步骤通过Azure Monitor启用监控且运行正常。在推广至其他环境前,我希望验证文档中ARM模板的具体变更。据我理解,该模板会创建Managed Services注册定义并分配至指定资源组。请问是否可在Azure Portal中查看资源组已分配的Managed Services注册定义?
回答
可以在Azure门户中查看资源组已分配的Managed Services注册定义,具体操作步骤如下:
- 登录Azure门户,导航到目标资源组
- 在资源组左侧菜单中选择访问控制(IAM)
- 切换至外部标识标签页,即可查看已分配的Managed Services注册定义,包括对应的服务商租户ID、授权角色等详细信息
你提供的ARM模板核心功能说明:
该模板会完成两项关键操作:
- 创建Managed Services注册定义,配置内容包含服务商租户ID、授权的Azure AD主体角色等信息
- 通过嵌套部署将上述注册定义分配到指定的目标资源组
对应的ARM模板(已将注释翻译为中文):
{ "$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "mspOfferName": { "type": "string", "metadata": { "description": "指定你的服务方案的唯一名称" }, "defaultValue": "<由服务商填写> 指定服务方案的标题" }, "mspOfferDescription": { "type": "string", "metadata": { "description": "托管服务提供商方案的名称" }, "defaultValue": "<由服务商填写> 提供你的服务方案的简要描述" }, "managedByTenantId": { "type": "string", "metadata": { "description": "指定托管服务提供商的租户ID" }, "defaultValue": "<由服务商填写> 提供你的租户ID" }, "authorizations": { "type": "array", "metadata": { "description": "指定对象数组,包含Azure Active Directory主体ID、Azure角色定义ID和可选的主体ID显示名称。指定的角色定义将授予提供商AD中的主体ID,主体ID显示名称对客户可见。" }, "defaultValue": [ { "principalId": "<替换为组的对象ID>", "principalIdDisplayName": "Azure AD B2C租户管理员", "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c" } ] }, "rgName": { "type": "string", "defaultValue": "<替换为资源组名称,例如 az-monitor-rg>" } }, "variables": { "mspRegistrationName": "[guid(parameters('mspOfferName'))]", "mspAssignmentName": "[guid(parameters('mspOfferName'))]" }, "resources": [ { "type": "Microsoft.ManagedServices/registrationDefinitions", "apiVersion": "2019-06-01", "name": "[variables('mspRegistrationName')]", "properties": { "registrationDefinitionName": "[parameters('mspOfferName')]", "description": "[parameters('mspOfferDescription')]", "managedByTenantId": "[parameters('managedByTenantId')]", "authorizations": "[parameters('authorizations')]" } }, { "type": "Microsoft.Resources/deployments", "apiVersion": "2018-05-01", "name": "rgAssignment", "resourceGroup": "[parameters('rgName')]", "dependsOn": [ "[resourceId('Microsoft.ManagedServices/registrationDefinitions/', variables('mspRegistrationName'))]" ], "properties":{ "mode":"Incremental", "template":{ "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": {}, "resources": [ { "type": "Microsoft.ManagedServices/registrationAssignments", "apiVersion": "2019-06-01", "name": "[variables('mspAssignmentName')]", "properties": { "registrationDefinitionId": "[resourceId('Microsoft.ManagedServices/registrationDefinitions/', variables('mspRegistrationName'))]" } } ] } } } ], "outputs": { "mspOfferName": { "type": "string", "value": "[concat('Managed by', ' ', parameters('mspOfferName'))]" }, "authorizations": { "type": "array", "value": "[parameters('authorizations')]" } } }
内容的提问来源于stack exchange,提问作者DeMaki
相关产品推荐
相关产品推荐

