Overview and prerequisites
Before you deploy NGINXaaS you need to meet the following prerequisites:
-
An Azure account with an active subscription (if you don’t have one, create an account for free).
-
Confirm that you have the appropriate access before starting the setup:
-
The simplest approach is to use Azure’s built-in Owner role on either a specific resource group or the subscription.
-
It’s possible to complete a limited setup with the built-in Contributor role.
-
-
The specific Azure permissions required to deploy NGINXaaS are:
- microsoft.network/publicIPAddresses/join/action
- nginx.nginxplus/nginxDeployments/Write
- microsoft.network/virtualNetworks/subnets/join/action
- nginx.nginxplus/nginxDeployments/configurations/Write
- nginx.nginxplus/nginxDeployments/certificates/Write
-
Additionally, if you are creating the Virtual Network or IP address resources that NGINXaaS for Azure will be using, then you probably also want those permissions as well.
-
Note that assigning the managed identity permissions normally requires an "Owner" role.