Permission requirements for PBX Express deployment in Azure

[JonnyM]

Can anybody from 3CX explain what permissions the account that is used to run PBX Express needs? It's not necessarily that I don't trust you, it's that I can't really trust any third party with the same permissions I have over our Azure tenant. My plan was to create a limited account to use to deploy the PBX and then bin the account once the deployment is completed - assuming that once 3CX is deployed there's no further access required to Azure APIs.

What would be really nice would be if this could make it into the Azure Marketplace so that I don't need to grant any permissions to a third party. In the absence of this, can anybody explain what the PBX Express setup process actually does in my tenant?

Thanks

 

[NickD_3CX]

The minimum permissions required I believe are:

• Sign you in and read your Profile
• Access Azure Service Management as you (preview)

As you correctly said, once PBX Express has done its thing you can delete the user as there are no interactions that are done after that.

About the Marketplace in Azure and other Hosting Providers, it is something we are looking into but can't say for sure yet.

 

[JonnyM]

Thanks for confirming I can revoke permissions once I've deployed, and good to hear you're considering adding 3CX to the marketplace.

 

[cobaltit]

Or just do a manual install and don't worry about the permissions

 

[JonnyM]

I've done that before (for our current instance) and I've got a Debian 8 system that won't upgrade to 9 and sees random CPU spikes since the failed upgrade rolled back, so I am keen to do the next deployment in a way that 3CX recommend.