Api Access

Welcome to Api Access documentation for AZExecute. This guide provides detailed information on how to assign roles and manage access for the Api.

Give Api permissions

Your AZExecute Api access is restricted by default. You can give access to the Api from the System Settings menu, or directly from the Azure portal.

Users, groups and service principals from your tenant can get access to the Api. When you have assigned a role for any type of principal, that entity can begin authorizing against the AZExecute Api.

---

---

Choose a role and select a principal to give Api access.

Just as in the Azure Portal this requires the logged in user to have permissions to do this. Application Administrator would for instance be able to.

Assigning Users and Groups in Azure

Roles within AZExecute are primarily managed from within the application by users with the TenantAdmin role. However, it is also possible to override these roles using Azure's role assignment for Enterprise Applications. Assigning a role to a user in Azure will override the role assigned within AZExecute, with the tenant's Azure settings taking precedence.

To assign users and groups access to AZExecute, navigate to the Azure portal and select the Enterprise Application. From there, go to the "Users and groups" section.

Provide specific users and groups with the necessary roles to access the application. This step is crucial for managing who can access and administer AZExecute.