Azure Custom Role to allow list keys for only FormRecognizer

Abdul Wajid 40 Reputation points
2023-04-20T04:50:32.77+00:00

Hello Team, I am trying to build a role that will be assigned on the resource group level to allow users contributor level access to FormRecognizer resources only. This role however also gives them access to list keys for other Cognitive Services resources. Is there a way to restrict them to only list Keys for ForRecognizer resources?

{
    "properties": {
        "roleName": "formRecognizer-contributor",
        "description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
        "assignableScopes": [
            "/"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.CognitiveServices/accounts/listKeys/action",
                    "Microsoft.CognitiveServices/*/read"
                ],
                "notActions": [],
                "dataActions": [
                    "Microsoft.CognitiveServices/accounts/FormRecognizer/*"
                ],
                "notDataActions": []
            }
        ]
    }
}

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
682 questions
Azure AI services
Azure AI services
A group of Azure services, SDKs, and APIs designed to make apps more intelligent, engaging, and discoverable.
2,434 questions
{count} votes