Delegate access within a tenant

Question

Our organisation have all the resources in the same tenant. Can we split the permission "country" based?
So for Germany Local IT Department, they will get access everything that has to do with "their IT" etc?

Answer 1

Hi Nika,

The most common way to do this would be to organise your resources into different resource groups or Azure subscriptions and then you can scope your RBAC role assignments to the Resource Groups, Subscriptions or Management Groups. For example, you could have an Azure subscription (or management group if using multiple subscriptions) dedicated to each Country.

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#step-1-identify-the-needed-scope