Troubleshooting Azure Kubernetes Service (AKS) Access for Azure Active Directory (Azure AD) Accounts

Resolve AKS1 Access Issue for Contoso.com Accounts

Question

You have an Azure Active Directory (Azure AD) tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1.

You discover that AKS1 cannot be accessed by using accounts from Contoso.com.

You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort.

What should you do first?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A

https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli

The correct answer is D. From Azure AD, configure the User settings.

Explanation: Azure Kubernetes Service (AKS) is a managed Kubernetes service offered by Microsoft Azure that simplifies the deployment, management, and scaling of containerized applications using Kubernetes.

To access AKS, the user must have permission to access the Kubernetes cluster. To enable Azure AD users to access AKS, you need to configure the user settings in Azure AD.

Option A is not a feasible solution as it involves recreating AKS1 which can be a time-consuming task and requires additional administrative effort.

Option B is not relevant to the issue at hand as upgrading the version of Kubernetes will not enable Azure AD users to access AKS1.

Option C may be a possible solution, but it is not the most efficient one. Implementing Azure AD Premium will add extra features to Azure AD, but it may not necessarily solve the issue at hand. Additionally, implementing Azure AD Premium requires additional administrative effort and can be costly.

Therefore, the correct answer is D. From Azure AD, configure the User settings. By configuring user settings in Azure AD, you can enable Azure AD users to access the AKS1 cluster without having to recreate the cluster or upgrade Kubernetes. This solution minimizes administrative effort and solves the issue at hand.