If I were to use Azure AD instead, is it possible that I can create a group of users, and within the group, different users gain access to different resources (yes/no)? If yes, how?

Mark JZ Yeap 96 Reputation points
2021-03-19T04:21:26.613+00:00

If I were to use Azure AD instead, is it possible that I can create a group of users, and within the group, different users gain access to different resources (yes/no)? If yes, how?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,533 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 36,336 Reputation points Microsoft Employee
    2021-03-29T17:00:20.477+00:00

    Hi @Mark JZ Yeap ,

    Yes, you can definitely do this! You can assign specific roles to each user and apply either built-in roles or custom roles to provide the granular access to resources that you need.

    You can also assign users directly to resources.

    Any role you assign at the group level will be applied to all users in the group, but individual roles can still be assigned to each user.

    0 comments No comments