| title | description | ms.topic | ms.date | ms.custom |
|---|---|---|---|---|
Add a user as a lab creator in Azure Lab Services |
This article shows how to add a user to the Lab Creator role for a lab plan in Azure Lab Services. The lab creators can create labs within this lab plan. |
how-to |
11/19/2021 |
subject-rbac-steps |
[!INCLUDE preview note]
This article shows you how to add users as lab creators to a lab account or lab plan in Azure Lab Services. These users then can create labs and manage those labs.
The user account you used to create the lab account or lab plan is automatically able to create labs. Otherwise, the user must be a member of the Lab Creator role. If using a lab plan, user must be a Lab Creator on the lab plan or the resource group that contains the lab plan. If using a lab account, the user must be a Lab Creator on the lab account. If you are planning to use the same user account to create a lab as you did creating the lab plan or lab account, you can skip this step. To use another user account to create a lab, do the following steps:
To provide educators the permission to create labs for their classes, add them to the Lab Creator role: For detailed steps, see Assign Azure roles using the Azure portal.
-
On the Lab Plan resource, select Access control (IAM)
-
Select Add > Add role assignment (Preview).
-
On the Role tab, select the Lab Creator role.
-
On the Members tab, select the user you want to add to the Lab Creators role
-
On the Review + assign tab, select Review + assign to assign the role.
[!NOTE] If you are adding a non-Microsoft account user as a lab creator, see Adding a guest user as a lab creator.
You might need to add an external user as a lab creator. If that is the case, you'll need to add them as a guest account on the Azure AD attached to the subscription. The following types of email accounts might be used:
- A Microsoft email account, such as
@outlook.com,@hotmail.com,@msn.com, or@live.com. - A non-Microsoft email account, such as one provided by Yahoo or Google. However, these types of accounts must be linked with a Microsoft account.
- A GitHub account. This account must be linked with a Microsoft account.
For instructions to add someone as a guest account in Azure AD, see Quickstart: Add guest users in the Azure portal - Azure AD. If using an email account that's provided by your university’s Azure AD, you don't have to add them as a guest account.
Once the user has an Azure AD account, add the Azure AD user account to Lab Creator role.
Important
Only lab creators need an account in Azure AD connected to the subscription. For account requirements for students see Tutorial: Access a lab in Azure Lab Services.
Educators can use non-Microsoft email accounts to register and sign in to a lab. However, the sign-in to the Lab Services portal requires that educators first create a Microsoft account that's linked to their non-Microsoft email address.
Many educators might already have a Microsoft account linked to their non-Microsoft email addresses. For example, educators already have a Microsoft account if they have used their email address with Microsoft’s other products or services, such as Office, Skype, OneDrive, or Windows.
When educators sign in to the Lab Services portal, they are prompted for their email address and password. If the educator attempts to sign in with a non-Microsoft account that does not have a Microsoft account linked, the educator will receive the following error message:
To sign up for a Microsoft account, educators should go to http://signup.live.com.
Educators can also use an existing GitHub account to register and sign in to a lab. If the educator already has a Microsoft account linked to their GitHub account, then they can sign in and provide their password as shown in the previous section. If they have not yet linked their GitHub account to a Microsoft account, they should select Sign-in options:
On the Sign-in options page, select Sign in with GitHub.
Finally, they are prompted to create a Microsoft account that's linked to their GitHub account. It happens automatically when the educator selects Next. The educator is then immediately signed in and connected to the lab.
See the following articles: