Hello @KamalBernard-9210,
I think, you can try a mix of Azure Policy and RBAC to achieve this requirement. See the policy definition available to limit the SKUs as below
Here, you can set exclusions for this policy for your selected resource groups at this same page
In RBAC, you can set access for the selected accounts to control the resources in selected RGs only
Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion
Regards,
Manu