What does subscription scope mean?

Question

Hello,

I created an Azure Storage Account.

1. I noticed in the Access List, Role Assignments my scope is set to Subscription. What does this indicate?
2. When granting access on Azure Synapse as a linked service, I can use the Authentication Key "Account key" and the Account Selection method as "From Subscription". What is this doing? How does access from Azure Subscritption work?

Thank You,

Michael

Answer 1

@Michael Stoler Thanks for posting your query on Microsoft Q&A.

1. The scope of a role assignment determines the extent of its reach. In your case, the scope is set to Subscription. This means that the role assignment applies to all resources within the subscription.
2. The Account Selection Method determines how the linked service will be authenticated. When you select From Subscription, the linked service will authenticate using the credentials of your Azure subscription ¹.

Additional Reading:

https://learn.microsoft.com/en-us/azure/role-based-access-control/scope-overview#scope-levels

Assign an Azure role for access to blob data

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

https://learn.microsoft.com/en-us/azure/synapse-analytics/spark/apache-spark-secure-credentials-with-tokenlibrary?pivots=programming-language-python

---

Let me know in the comments if you have further questions. Comment is the fastest way to reach the experts for any questions or help you need.

Please don’t forget to Accept Answer and hit Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members for remediation for similar issues.