Create File Shares 2 – Implement and Manage Storage for Azure Virtual Desktop
Update-AzStorageAccountAuthForAES256 -ResourceGroupName $ResourceGroupName -StorageAccountName $StorageAccountName
#You can run the Debug-AzStorageAccountAuth cmdlet to conduct a set of basic checks on your AD configuration with the logged on AD user. This cmdlet is supported on AzFilesHybrid v0.1.2+ version. For more details on the checks performed in this cmdlet, see Azure Files Windows troubleshooting guide.
\ 11.\ The next step is to create the ADDS group for AVD users and assign permissions on the file share.
\ 12.\ If you are using the Azure AD domain service, then you can create a security group in Azure AD itself, and it will sync with Azure ADDS. Go to Azure AD and click Groups. On the All Groups plane click “New group.” See Figure 5-22.
Figure 5-22. AVD user profile permission, user group creation
\ 13.\ Enter the group name and select the correct members to whom you want to give access to the AVD desktop. See Figure 5-23.
Figure 5-23. AVD user profile, group creation
\ 14.\ The group will be also available in the Azure ADDS Active Directory User and Computer (ADUC) console. See Figure 5-24.
Figure 5-24. AVD user profile, verify group creation
\ 15.\ If you are using on-premises ADDS, then simply go to the ADDS ADUC console and create new group, and it will sync with Azure AD.
\ 16.\ Go to the file share, select Access control (IAM), click Add, and select “Add role assignment.” See Figure 5-25.
Figure 5-25. AVD user profile permission on file share
\ 17.\ Select the Storage File Data SMB Share Contributor role, and click Next. See Figure 5-26.
Figure 5-26. AVD user profile permission on file share, SMB contributor
\ 18.\ Select the AVD group we created in an earlier step, and click Select. See Figure 5-27.
Figure 5-27. AVD user profile permission on file share, select a group
\ 19.\ Click “Review + assign.” See Figure 5-28 and Figure 5-29.
Figure 5-28. AVD user profile permission on file share, review and assign final page
Figure 5-29. AVD user profile permission on file share, review and assign