我正在尝试为开发人员创建一个自定义角色,以允许他们简单地交换我们各种 WebApp 上的插槽。这是我为完成此任务而创建的角色:
{
"Name": "Swap Role",
"Id": "",
"IsCustom": true,
"Description": "Lets developers perform slot swaps.",
"Actions": [
"microsoft.web/sites/diagnostics/siteswap/read",
"microsoft.web/sites/slots/diagnostics/siteswap/read",
"microsoft.web/sites/slots/slotsswap/action",
"microsoft.web/sites/slotsswap/action"
],
"NotActions": [],
"DataActions": [],
"NotDataActions": [],
"AssignableScopes": [
"/subscriptions/{subscriptionId-1}/resourceGroups/Development",
"/subscriptions/{subscriptionId-2/resourceGroups/Development",
"/subscriptions/{subscriptionId}/resourceGroups/Test",
"/subscriptions/{subscriptionId-2/resourceGroups/Test",
"/subscriptions/{subscriptionId}/resourceGroups/Production",
"/subscriptions/{subscriptionId-2/resourceGroups/Production"
]
}
问题是,一旦我将此角色应用于我的测试用户,当我去交换插槽时,我的测试用户会在交换面板中看到错误“您没有交换权限”、“您没有写入权限” .
是否可以允许用户在不授予他们对 WebApp 的完全写入权限的情况下交换插槽?我缺少什么权限?