Page Comparison

...

• Turn on System-assigned managed identity for the App Service

• Assign to the App Service identity root level permissions to the App Service

• Assign the App Service to the Global Administrator role for the tenant

These steps ensure that EmpowerID has the appropriate authentication and access to read and write the user information in for your Azure AD and subscriptiontenant.

To turn on System-assigned managed identity for the App Service

...

1. In Azure navigate to Management groups.

2. Click the details link beside Tenant Root Group.

   

3. On the tenant root page, click Access Control (IAM) in the sidebar.

   

4. On the Access Control (IAM) page, click Add and then select Add role assignment.

   

5. In the Add role assignment pane that appears, click Select a role and then select Owner.

   

6. Search for and select the App Service you deployed to the tenant.

   

7. Save the role assignment.

   

Assign the App Service to the Global Administrator role for the tenant

1. Navigate to Azure Active Directory.

2. In Azure Active Directory, select Roles and administrators (Preview) from the sidebar.

   

3. Enter Global administrator in the search field and then select the Global administrator role.

   

4. On the Global administrator | Assignments page, click Add assignments.

   

5. In the Add assignments pane that appears, search for the App Service and then click the tile for the service to select it.

   

6. Click Add.

   

...