Skip to main content

Performing a Role Assignment

Role assignments are used to ensure that the Dremio app registration grants the appropriate access in the right resource group. This step takes place in the Azure portal as part of connecting your Azure account to Dremio Cloud during the sign-up process for Dremio Cloud or as part of adding a project to an organization.

note

Dremio advises to use Azure's built-in roles: Virtual Machine Contributor and Avere Contributor. If you would like to use a custom role instead, you can still follow all steps in this process.

For creating custom roles, see Creating a Storage Role and a Creating a Compute Role.

  1. Log in to the Azure portal.

  2. Search for "Resource groups" and select the Resource groups service in the search results.

  3. Click on the name of the Resource group that will be used for Dremio Cloud.

  4. Click Access control (IAM) towards the top of the left sidebar.

  5. Click the Add at the top and select Add role assignment.

  6. On the Role tab, complete the following:

    a. Search for "Virtual Machine Contributor" and click on the name of the Virtual Machine Contributor in the search results, ensuring it is highlighted.

    b. Click Next.

  7. On the Members tab, complete the following:

    a. For Assign access to, if not already selected, make sure User, group, or service principal is selected.

    b. Click Select members.

    c. Search for your app registration name. Click on the name on search results. When selected, the name should appear under the Selected members at the bottom of the screen.

    d. Click Select.

    e. Click Next.

  8. Click Review + assign.

  9. Repeat steps 5 through 8, replacing Virtual Machine Contributor with Avere Contributor.

Azure CLI​

A role assignment can also be created through the Azure CLI. See the following instructions:

#example app registration and resource group given
az role assignment create --role "Virtual Machine Contributor" --assignee XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX -g dremiocloudresourcegroup
az role assignment create --role "Avere Contributor" --assignee XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX -g dremiocloudresourcegroup