Lab 8: Identity and Access Management – Providing Privileges on Resources in
Azure.
Objective:
To Identity and Access Management and Providing Privileges on Resources in Azure.
Theory:
Identity and Access Management (IAM) in Microsoft Azure ensures secure access control by managing user
permissions for cloud resources. Azure Role-Based Access Control (RBAC) allows administrators to assign
specific roles, such as Owner, Contributor, or Reader, to users, ensuring they have the appropriate
privileges while maintaining security and compliance.
Procedure:
Step 1: Log in to Azure Portal
Open a web browser and go to Azure Portal.
Sign in with your Azure credentials.
Step 2: Navigate to the Resource
In the Azure portal, go to Resource groups.
Select the Resource Group that contains the resource.
Click on the Resource (e.g., Virtual Machine, Storage Account) to which you want to
assign privileges.
Step 3: Open the IAM (Access Control) Panel
On the left-hand menu, select Access Control (IAM).
Click Add role assignment.
Step 4: Assign Role to a User
Under the Role tab, choose the appropriate role (e.g., Contributor, Reader, Owner,
Virtual Machine Administrator, etc.).
Click Next to go to the Members tab.
Click Select members, search for the user, and select the desired user.
Click Next and then Review + assign to confirm.
Step 5: Verify Assigned Privileges
Have the assigned user log in to the Azure portal.
Check if they have the required access to the resource.
Attempt actions based on the assigned role (e.g., start/stop a virtual machine if assigned
as a Contributor).
Conclusion:
In this lab, we successfully implemented Identity and Access Management (IAM) in Azure, assigning roles and
privileges to control access to cloud resources. This demonstrated how Azure IAM enhances security, ensuring that
users have appropriate permissions while protecting sensitive data.