Hi I have assigned a project to someone and I have given him credentials of my sub account to azure for creating of app services for frontend and backend now project get completed and I want to revoke that access , I have changed the password of the email which were used for azure login but I am not sure either it auto logout the developer form VS CODE and visual studio or not , I DO NOT WANT TO REMOVE THAT USER NOW BUT WANT TO REVOKE IT FROM DEVELOPERS TOOLS ETC
Loading
Tasadduq BurneyPosted Sep 1, 2023, 8:56 PM
Changing the password of the email used for Azure login will not automatically log out the developer from their Visual Studio Code (VS Code) or Visual Studio (if they were logged in using those credentials). To revoke their access from developer tools, you should take the following steps:
Azure Portal Access: Make sure you've already changed the password for the Azure account that was used to access Azure resources. This will prevent the developer from accessing the Azure Portal using those credentials.
Visual Studio Code (VS Code):
Visual Studio:
Other Developer Tools: Depending on the specific tools the developer is using, they may have logged in with their Azure account in various places. Review the developer's setup and look for any instances where Azure credentials were used. You may need to log them out or update the credentials in those tools as well.
Mark TaborPosted Sep 1, 2023, 5:03 PM
Thanks for the reply actually we have one account on azure with limited access of resources I have changed the password of that account as well but the deverloper is still able to deploy the code on our azure app service how it can be ? what i need to check for ?
Mark TaborPosted Aug 20, 2023, 12:07 PM
Thanks both for the reply but what if the developer machine is isolated means he is using his own machine and using VS or visual studio so I do not have access to that machine to go and signout from there
Saravanan GanesanPosted Aug 20, 2023, 11:44 AM
Revoke Azure Access: You've already changed the password for the email account used for Azure login, which is a good first step. This will prevent the developer from accessing Azure resources through the Azure Portal or other Azure-related services that require login.
Azure CLI Logout: The developer might have used the Azure CLI to interact with your Azure resources. To ensure they are logged out from the Azure CLI, you can run the following command in your terminal: az logout
Visual Studio Code: If the developer was using Visual Studio Code to work on the project, you can revoke access by doing the following:
This will sign the developer out of Azure services within Visual Studio Code.
Visual Studio: If the developer was using Visual Studio for development, you can revoke access by:
If you want to be absolutely sure that the developer does not have any access, you might consider changing any service-specific credentials (like database connection strings or API keys) that the developer might have had access to.
Lastly, make sure to communicate these changes to the developer and let them know that their access has been revoked from the development environment.
Tahir AnsariPosted Aug 20, 2023, 6:39 AM
these steps will help prevent access from the developer's local tools, it's also essential to properly manage access and permissions in your various tools and platforms to ensure security and data integrity.
To revoke access from developer tools like VS Code and Visual Studio, you should consider doing the following:
1. Azure Portal: Ensure that you've removed or adjusted the permissions of the sub-account in Azure to revoke their access to the resources they were given access to.
2. Azure DevOps (if used): If your project is hosted on Azure DevOps, make sure to review and adjust their access permissions there as well.
3. VS Code:
- Open VS Code.
- Click on the account icon in the bottom left corner (usually it's the image or initials of the user).
- Click on "Sign out."
- If the developer used the old credentials, they will be signed out.
4. Visual Studio:
- Open Visual Studio.
- Go to the "Account Settings" from the "Help" menu.
- Click on "Manage Accounts."
- Remove the account associated with the old credentials.
5. Clear Cached Credentials:
Developers might still have cached credentials on their machines. You can ask them to clear their cached credentials for Azure and any other relevant tools.
6. Azure CLI:
If the developer used the Azure CLI, you might want to review their access there too. The Azure CLI stores access tokens, and they might need to sign in again using the new credentials.
7. GitHub, GitLab, Bitbucket, etc. (if used):
If the developer used any version control system (e.g., GitHub, GitLab, Bitbucket), ensure to review their access permissions there as well.
8. Communication:
It's also a good practice to communicate with the developer to let them know about the change and that their access to the resources has been revoked. This can help prevent any misunderstandings or issues.