How can I share a subscription among some accounts and each one has his own resource group?

Question

I have a subscription where I am the administrator/owner and this subscription will be used for more 4 account. Each account will have a resource group and it can create resources only in his resource group. Is it possible? For example, each account can create a VM in his RG only.

Answer 1

Yes, this is entirely possible. You just need to create the required resource groups and then grant the required users access only to their resource group through Azure RBAC permisisons.

Answer 2

@Bezerra, Itajiba The resource groups are deployed under subscriptions. Once you add any user under any subscription, they have options to deploy and use the azure services via the resource group they create.

Like you mentioned you have a Azure subscription and you would like to add other accounts to it, you can follow this article to understand what kind of roles you want those users to have for your subscriptions. These are handled by Role based access control feature in Azure.

The end user then can go to Azure portal and create their own resource groups which can then be controlled with RBAC for access to deploy resources.
You can follow this article to give RBAC permissions to each resource group.

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.

Answer 3

Any idea how to fix this