Skip to content

Commit 25dc71f

Browse files
committed
Note about removing role assignments
1 parent a8c2a1a commit 25dc71f

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

articles/role-based-access-control/delegate-role-assignments-portal.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,10 +31,12 @@ To help determine the permissions the delegate needs, answer the following quest
3131
- What role assignments can the delegate remove?
3232
- What types of principals can the delegate assign roles to?
3333
- Which principals can the delegate assign roles to?
34-
- Can delegate remove any role assignments?
3534

3635
Once you know the permissions that delegate needs, you use the following steps to add a condition to the delegate's role assignment. For example conditions, see [Examples to delegate Azure role assignment management with conditions](delegate-role-assignments-examples.md).
3736

37+
> [!NOTE]
38+
> The conditions you add in these steps apply to assigning specific roles, but they also typically apply to removing role assignments for those same roles.
39+
3840
## Step 2: Start a new role assignment
3941

4042
1. Sign in to the [Azure portal](https://portal.azure.com).

0 commit comments

Comments
 (0)