Granting Puppeteers read-only access to Azure

This document shows how to grant a Puppeteers representative access to your Azure subscription using the Azure Portal.

1. Login to your Azure Portal
2. Type "Users" in the search box
3. Click on the "Users" service
4. Click on "New guest user"
5. Select "Invite User"
6. Fill in the fields. The email address should be [email protected].
7. Click on "Invite" at the bottom
8. The guest user will receive an invite to your Azure in the email address you defined above.

Now the user has been created. However, it is lacking permissions to do anything useful. We will fix that in the next steps by assigning it a role:

1. Type "Subscriptions" to the search box
2. Click on the "Subscriptions" service
3. Click on the subscription you want to grant access to
4. Select "Access control (IAM)" from the left-hand side pane
5. Click on "+ Add" button to open an action menu
6. Click on "Add role assignment"
7. Select the "Reader" role
8. Ensure that "Assign access to" is set to "User, group or service principal"
9. Select the guest user you created in the previous step
10. Click on "Save"