Restrict access to a resource group outside country

hitesh chandwani 1 Reputation point
2022-11-02T04:01:09.697+00:00

Hi Everyone,

Is it possible and feasible to restrict access on a Resource group, by determining the login region of a user, so when the same user logs in the US has access to it but when the user is outside US they dont have access to the resource group

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
666 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,464 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Givary-MSFT 27,886 Reputation points Microsoft Employee
    2022-11-03T08:48:27.167+00:00

    @hitesh chandwani Thank you for reaching out to us. As I understand you are looking for an option restrict access to a resource group outside country via Azure RBAC.

    Researched on this requirement, unfortunately this is not possible to achieve .

    Azure RBAC allows admins to grant only the amount of access that users need to perform their jobs. Access is granted by assigning the appropriate RBAC role to users, groups and/or applications at a certain scope. The scope of a role assignment can be a subscription, a resource group, or a single resource. A role assigned at a parent scope also grants access to the children contained within it.

    Would suggest to share your feedback on https://feedback.azure.com/d365community which is closely monitored by our product group team for any feature requests.

    Let me know if you have any further questions.

    0 comments No comments