Assign Contributor Role only to certain resource groups / resources

Question

I want to assign contributor access only to certain resources /resource Groups inside a subscription. How can I do this? I already tried to remove the contributor group from the subscription itself and only assign it to certain RGs. However, then the people in this group are not able to access the subscription. What is the best way to achieve this?

Answer 1

Hi @Andreas · Thanks for your query.

You should consider assigning the group with Read permission at the Subscription level, so that all Resources/Resource Groups in that subscription are visible to the members of the group and then grant contributor permission to the group at Resource/Resource Group level so that the group members can only update/change specific Resources/Resource Groups only.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.