This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 70%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWR%3C/text%3E%3C/svg%3E)
Hello,
I am viewing a Customer's resources using an Azure Lighthouse account, which has the Reader role assigned on all Customer's subscriptions.
I have noticed that I am unable to see any Role Assignments on those subscriptions, or any underlying resources. The only ones showing up are the permissions for Lighthouse Groups.
Is this a known limitation of Lighthouse?
Kind regards,
Wojciech
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 41%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
@Wojciech Rozanski Thank you for posting this question.
I am looking into it and will get back soon with an update.
@Wojciech Rozanski following up to check if you had a chance to review my answer below. Please let me know if you have any questions.
Please click Accept answer and Yes if the answer helped so that it can help others in the community looking for help on similar topics.
@Wojciech Rozanski , I am sorry for the delayed response. I got confirmation from the team that this is by design that the managing tenant user with 'Reader' role (delegated through Azure Lighthouse), will not be able to view the role assignments in the managed tenant. Please let me know if you have any question.