Share via

Custom RBAC

Praveen Tiwari 1 Reputation point
2021-06-21T16:10:46.987+00:00

Can we create a custom RBAC role that has permissions to a specific resource group name in all subscriptions under the same management group but not to anything else within the subscription

Azure Role-based access control
Azure Role-based access control

An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 37,396 Reputation points Microsoft Employee Moderator
    2021-06-21T18:50:33.657+00:00

    Hi <em name="deleted_4148820">anonymous user</em>,

    In Azure, you can specify a scope at four levels: management group, subscription, resource group, or resource. Scopes are structured in a parent-child relationship. You can assign roles at any of these levels of scope.

    107761-image.png

    (From the RBAC Guide)

    -

    If this answer was helpful to you, please remember to "mark as answer" so that others in the community with similar questions can more easily find a solution.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.