azureazure-digital-twins

Azure Digital Twin - RBAC access for models/twins


With new version of Azure Digital Twin, how to enable RBAC access apart from owner/reader role to the digital twin. Similar to previous version, where we would be able to provide access at any level to particular user/tenant id, will it be possible to provide role access at a particular node and below.

I assume in below command, it supports only owner/reader role.

az dt rbac assign-role -n <adtinstance> --role owner -g <resourcegroup> --assignee <serviceprincipal>

Solution

  • The new version of Azure Digital Twins has no built-in support to assign roles to subsets of the graph. Like in your example, you can create an owner or reader for the entire graph.