Skip to content

Revise role assignment for Translator resource #739

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
HiltonGiesenow wants to merge 1 commit into from
Closed

Revise role assignment for Translator resource #739

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions articles/ai-services/translator/solutions/connector/document-translation-flow.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@ First, create a system-assigned managed identity for your Translator resource an

#### Role assignment

Next, assign a **`Storage Blob Data Contributor`** role to the managed identity *at the* storage scope for your storage resource.
Next, assign the **`Storage Blob Data Reader`** and **`Storage Blob Data Contributor`** roles to the managed identity at the storage scope for your storage resource.

1. Go to the [Azure portal](https://portal.azure.com/) and sign in to your Azure account.
1. Select the Translator resource.
Expand All @@ -113,14 +113,14 @@ Next, assign a **`Storage Blob Data Contributor`** role to the managed identity

:::image type="content" source="../../media/managed-identities/azure-role-assignments-page-portal.png" alt-text="Screenshot: Azure role assignments page in the Azure portal.":::

1. Finally, assign a **Storage Blob Data Contributor** role to your Translator resource. The **Storage Blob Data Contributor** role gives Translator (represented by the system-assigned managed identity) read, write, and delete access to the blob container and data. In the **`Add role assignment`** pop-up window, complete the fields as follows and select **Save**:
1. Finally, assign both **Storage Blob Data Reader** and **Storage Blob Data Contributor** roles to your Translator resource. The **Storage Blob Data Reader** role gives Translator (represented by the system-assigned managed identity) read access to the source container and blobs and the **Storage Blob Data Contributor** role gives Translator read, write, and delete access to the destination blob container and data. To start, assign the **Storage Blob Data Reader** role as follows: In the **`Add role assignment`** pop-up window, complete the fields as follows and select **Save**:

| Field | Value|
|------|--------|
|**Scope**| ***Storage***.|
|**Subscription**| ***The subscription associated with your storage resource***.|
|**Resource**| ***The name of your storage resource***.
|**Role** | ***Storage Blob Data Contributor***.|
|**Role** | ***Storage Blob Data Reader***.|
Comment on lines 121 to +123

1. After the *Added Role assignment* confirmation message appears, refresh the page to see the added role assignment.

Expand All @@ -130,6 +130,8 @@ Next, assign a **`Storage Blob Data Contributor`** role to the managed identity

:::image type="content" source="../../media/managed-identities/assigned-roles-window.png" alt-text="Screenshot: Azure role assignments window.":::

1. Repeat the previous 3 steps for the **Storage Blob Data Contributor** role.

### Configure a Document translation flow

Now that you completed the prerequisites and initial setup, let's get started using the Translator v3 connector to create your document translation flow:
Expand Down