How to restrict access to the inherited groups (management and subscription) access to the resources underneath it?

Question

Hi,

In the scenario where in the storage account is used to host a confidential data, how can we prevent the inherited subscription and management groups (with owner and contributor roles) access to the connection string of this new confidential storage account created in this subscription.

Thanks,

Sandhya