Skip to content

Update user-access-control.md #8066

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
+17 −0
Open

Update user-access-control.md #8066

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions WindowsServerDocs/manage/windows-admin-center/configure/user-access-control.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,23 @@ If you want to give specific Microsoft Entra users or groups gateway user or gat
Once you've done this, only members listed in the **Users and groups** tab will be able to access the Windows Admin Center gateway.
3. In the Users and groups tab, select **Add user**. You must assign a gateway user or gateway administrator role for each user/group added.

> [!NOTE]
> Windows Admin Center registration and creation of a new application creates these roles - if the application was made manually the values WACAdmin (Windows Admin Center Administrators) and WACUser (Windows Admin Center Users) need to be used.
>
> The App Registration Manifest should have these two roles (example manifest, just the roles and values):
> ```
> {
> "description": "Windows Admin Center administrators can use and configure the site.",
> "displayName": "Windows Admin Center Administrators",
> "value": "WACAdmin"
> },
> {
> "description": "Windows Admin Center users can access and use the site, but not configure the site.",
> "displayName": "Windows Admin Center Users",
> "value": "WACUser"
> }
> ```

Once you turn on Microsoft Entra authentication, the gateway service restarts and you must refresh your browser. You can update user access for the SME Microsoft Entra application in the Azure portal at any time.

Users will be prompted to sign in using their Microsoft Entra identity when they attempt to access the Windows Admin Center gateway URL. Remember that users must also be a member of the local Users on the gateway server to access Windows Admin Center.
Expand Down