Skip to content

[Compute] az sig in-vm-access-control-profile: Support GalleryInVMAccessControlProfile#31720

Merged
yanzhudd merged 23 commits intoAzure:devfrom
yanzhudd:msp-feature
Jul 14, 2025
Merged

[Compute] az sig in-vm-access-control-profile: Support GalleryInVMAccessControlProfile#31720
yanzhudd merged 23 commits intoAzure:devfrom
yanzhudd:msp-feature

Conversation

@yanzhudd
Copy link
Copy Markdown
Contributor

@yanzhudd yanzhudd commented Jun 26, 2025

Related command

az sig in-vm-access-control-profile create/update/delete/show
az sig in-vm-access-control-profile-version create/update/delete/show
az sig in-vm-access-control-profile-version config privilege add/remove not supported yet
az sig in-vm-access-control-profile-version config role add/remove not supported yet
az sig in-vm-access-control-profile-version config identity add/remove not supported yet
az sig in-vm-access-control-profile-version config role-assignment add/remove not supported yet

Description

Currently, the rules property is not updatable, but it will be supported in the future. I’ve moved the az sig in-vm-access-control-profile-version config command group from this branch to the msp-feature-rules branch in the yanzhudd repo. We’ll support this command group once the backend server is ready to handle updates to the rules property.

Close: #31626
aaz PR: Azure/aaz#793

Testing Guide

History Notes

[Compute] az sig in-vm-access-control-profile: Add command group to manage in VM access control profile
[Compute] az sig in-vm-access-control-profile-version: Add command group to manage in VM access control profile version


This checklist is used to make sure that common guidelines for a pull request are followed.

@yanzhudd yanzhudd self-assigned this Jun 26, 2025
Copilot AI review requested due to automatic review settings June 26, 2025 06:34
@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd bot commented Jun 26, 2025

️✔️AzureCLI-FullTest
️✔️acr
️✔️latest
️✔️3.12
️✔️3.9
️✔️acs
️✔️latest
️✔️3.12
️✔️3.9
️✔️advisor
️✔️latest
️✔️3.12
️✔️3.9
️✔️ams
️✔️latest
️✔️3.12
️✔️3.9
️✔️apim
️✔️latest
️✔️3.12
️✔️3.9
️✔️appconfig
️✔️latest
️✔️3.12
️✔️3.9
️✔️appservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️aro
️✔️latest
️✔️3.12
️✔️3.9
️✔️backup
️✔️latest
️✔️3.12
️✔️3.9
️✔️batch
️✔️latest
️✔️3.12
️✔️3.9
️✔️batchai
️✔️latest
️✔️3.12
️✔️3.9
️✔️billing
️✔️latest
️✔️3.12
️✔️3.9
️✔️botservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️cdn
️✔️latest
️✔️3.12
️✔️3.9
️✔️cloud
️✔️latest
️✔️3.12
️✔️3.9
️✔️cognitiveservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️compute_recommender
️✔️latest
️✔️3.12
️✔️3.9
️✔️computefleet
️✔️latest
️✔️3.12
️✔️3.9
️✔️config
️✔️latest
️✔️3.12
️✔️3.9
️✔️configure
️✔️latest
️✔️3.12
️✔️3.9
️✔️consumption
️✔️latest
️✔️3.12
️✔️3.9
️✔️container
️✔️latest
️✔️3.12
️✔️3.9
️✔️containerapp
️✔️latest
️✔️3.12
️✔️3.9
️✔️core
️✔️latest
️✔️3.12
️✔️3.9
️✔️cosmosdb
️✔️latest
️✔️3.12
️✔️3.9
️✔️databoxedge
️✔️latest
️✔️3.12
️✔️3.9
️✔️dls
️✔️latest
️✔️3.12
️✔️3.9
️✔️dms
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventgrid
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventhubs
️✔️latest
️✔️3.12
️✔️3.9
️✔️feedback
️✔️latest
️✔️3.12
️✔️3.9
️✔️find
️✔️latest
️✔️3.12
️✔️3.9
️✔️hdinsight
️✔️latest
️✔️3.12
️✔️3.9
️✔️identity
️✔️latest
️✔️3.12
️✔️3.9
️✔️iot
️✔️latest
️✔️3.12
️✔️3.9
️✔️keyvault
️✔️latest
️✔️3.12
️✔️3.9
️✔️lab
️✔️latest
️✔️3.12
️✔️3.9
️✔️managedservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️maps
️✔️latest
️✔️3.12
️✔️3.9
️✔️marketplaceordering
️✔️latest
️✔️3.12
️✔️3.9
️✔️monitor
️✔️latest
️✔️3.12
️✔️3.9
️✔️mysql
️✔️latest
️✔️3.12
️✔️3.9
️✔️netappfiles
️✔️latest
️✔️3.12
️✔️3.9
️✔️network
️✔️latest
️✔️3.12
️✔️3.9
️✔️policyinsights
️✔️latest
️✔️3.12
️✔️3.9
️✔️privatedns
️✔️latest
️✔️3.12
️✔️3.9
️✔️profile
️✔️latest
️✔️3.12
️✔️3.9
️✔️rdbms
️✔️latest
️✔️3.12
️✔️3.9
️✔️redis
️✔️latest
️✔️3.12
️✔️3.9
️✔️relay
️✔️latest
️✔️3.12
️✔️3.9
️✔️resource
️✔️latest
️✔️3.12
️✔️3.9
️✔️role
️✔️latest
️✔️3.12
️✔️3.9
️✔️search
️✔️latest
️✔️3.12
️✔️3.9
️✔️security
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicebus
️✔️latest
️✔️3.12
️✔️3.9
️✔️serviceconnector
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicefabric
️✔️latest
️✔️3.12
️✔️3.9
️✔️signalr
️✔️latest
️✔️3.12
️✔️3.9
️✔️sql
️✔️latest
️✔️3.12
️✔️3.9
️✔️sqlvm
️✔️latest
️✔️3.12
️✔️3.9
️✔️storage
️✔️latest
️✔️3.12
️✔️3.9
️✔️synapse
️✔️latest
️✔️3.12
️✔️3.9
️✔️telemetry
️✔️latest
️✔️3.12
️✔️3.9
️✔️util
️✔️latest
️✔️3.12
️✔️3.9
️✔️vm
️✔️latest
️✔️3.12
️✔️3.9

@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd bot commented Jun 26, 2025

⚠️AzureCLI-BreakingChangeTest
⚠️vm
rule cmd_name rule_message suggest_message
⚠️ 1011 - SubgroupAdd sig in-vm-access-control-profile sub group sig in-vm-access-control-profile added
⚠️ 1011 - SubgroupAdd sig in-vm-access-control-profile-version sub group sig in-vm-access-control-profile-version added

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds support for managing in‐VM access control profiles and their versions in the Compute module. It introduces new command groups and corresponding operations (create, update, show, delete, wait) for both in‐VM access control profiles and for their configuration (privileges, roles, identities, role assignments).

Reviewed Changes

Copilot reviewed 19 out of 20 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/azure-cli/azure/cli/command_modules/vm/tests/latest/test_vm_commands.py Updated tests to cover the new commands for in‐VM access control profiles and versions.
src/azure-cli/azure/cli/command_modules/vm/operations/sig_in_vm_access_control_profile_version_config.py New operations for configuring privileges, roles, identities, and role assignments for in‐VM access control profile versions.
src/azure-cli/azure/cli/command_modules/vm/operations/sig_in_vm_access_control_profile_version.py Added create and update operations for in‐VM access control profile versions.
src/azure-cli/azure/cli/command_modules/vm/linter_exclusions.yml Added new exclusion rules for parameters related to in‐VM access control profile commands.
src/azure-cli/azure/cli/command_modules/vm/commands.py Registered the new command groups for in‐VM access control profile versions and configuration commands.
Multiple files under src/azure-cli/azure/cli/command_modules/vm/aaz/latest/sig/in_vm_access_control_profile[-version]/ Auto‐generated command implementation files (create, delete, show, update, wait, and command group definitions).

@yonzhan
Copy link
Copy Markdown
Collaborator

yonzhan commented Jun 26, 2025

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link
Copy Markdown

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

@yanzhudd yanzhudd merged commit 406c878 into Azure:dev Jul 14, 2025
48 checks passed
@yanzhudd yanzhudd deleted the msp-feature branch July 14, 2025 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Auto-Assign Auto assign by bot Compute az vm/vmss/image/disk/snapshot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[MSP Feature] CLI support for GalleryInVMAccessControlProfile/GalleryInVMAccessControlProfileVersion

4 participants