Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

You must configure certain permissions in Azure before synchronization with BloxOne Universal DDI. Synchronizing Azure DNS without configuring these permissions may cause errors.

...

The following permissions are required for cloud forwarding:

Code Block
{
    "Name": "Custom DNS Resolver Full Management",
    "IsCustom": true,
    "Description": "Allows full management of DNS Resolver resources, including rules and virtual network links.",
    "permissions": [
           {
               "actions": [
                   "Microsoft.Network/dnsResolvers/read",
                   "Microsoft.Network/dnsResolvers/write",
                   "Microsoft.Network/dnsResolvers/delete",
                   "Microsoft.Network/dnsResolvers/outboundEndpoints/read",
                   "Microsoft.Network/dnsResolvers/outboundEndpoints/write",
                   "Microsoft.Network/dnsResolvers/outboundEndpoints/delete",
                   "Microsoft.Network/dnsResolvers/outboundEndpoints/join/action",
                   "Microsoft.Network/dnsForwardingRulesets/read",
                   "Microsoft.Network/dnsForwardingRulesets/write",
                   "Microsoft.Network/dnsForwardingRulesets/delete",
                   "Microsoft.Network/dnsForwardingRulesets/join/action",
                   "Microsoft.Network/dnsForwardingRulesets/forwardingRules/read",
                   "Microsoft.Network/dnsForwardingRulesets/forwardingRules/write",
                   "Microsoft.Network/dnsForwardingRulesets/forwardingRules/delete",
                   "Microsoft.Network/dnsForwardingRulesets/virtualNetworkLinks/read",
                   "Microsoft.Network/dnsForwardingRulesets/virtualNetworkLinks/write",
                   "Microsoft.Network/dnsForwardingRulesets/virtualNetworkLinks/delete",
                   "Microsoft.Network/virtualNetworks/read"
                   "Microsoft.Network/virtualNetworks/listDnsResolvers/action",
                   "Microsoft.Network/virtualNetworks/subnets/read",
                   "Microsoft.Network/virtualNetworks/subnets/join/action",                                                                                                                                                                ],
               "notActions": [],
               "dataActions": [],
               "notDataActions": []
           }
       ]
   }