Skip to content

Commit

Permalink
Added requirement for subs to be registered in the ManagedService pro…
Browse files Browse the repository at this point in the history
…vider namespace
  • Loading branch information
dacesmo committed Aug 26, 2023
1 parent 5f0aaa1 commit 5121762
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,8 @@ If you're unsure about what/how to use this module, please fill the [questionnai
- For scanning, an App (with its Service Principal) is required to be created in the ActiveDirectory, to enable
ContainerRegistry Task to run the image scanning This requires subscription-level `Security Administrator` role.

- The subscription(s) to onboard must be registered to the 'Microsoft.ManagedService' services provider namespace. More info on [how to enroll your subscription here](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-providers-and-types#:~:text=Azure%20portal-,Register%20resource%20provider,-To%20see%20all).

Note: Beware that previous roles in AD are found in two different levels; Organizational level (user AD **Assigned
Roles**), and Subscription level (user AD **Azure role assignments**). This role assignments take some time to
consolidate.
Expand Down

0 comments on commit 5121762

Please sign in to comment.