Assign Access Control

On the created subdomain, assign access control to the app registration to allow the DNS Application registration (Enterprise Application) to access the DNS zone. In this example, the DNS Application DNS_Client_Provisioning needs access to the subdomain customers.audio-code.co.il. The permission used to authorize this access is “DNS Zone Contributor”.

➢

To assign access control:

1.

In the Azure Portal Home page pane, select DNS Zones.

2.

Select the relevant Provider zone and then click Access control (IAM).

3.

Click Add > Add role assignment.

4.

Configure the role assignment as shown in the following figure.

5.

Search for the DNS Registration that you created in Registering DNS Application (Service Provider Tenant) and then click Select.

6.

Return to the Access Control (IAM) tab. The new DNS Zone Contributor permission is displayed.