Azure function rbac

Question

Hi,
Could not find really anything specific roles related to Functions Apps so what is right RBAC to give user if I want to give full access to Function(build, develop, test, monitor and delete) and its app service plan if you don't count Contributor? I found only two that could fit but are not sure: Website Contributor and Web Plan Contributor

Answer 1

@Wool Sock ,

The Contributor role is required to perform most function app-level tasks.

https://learn.microsoft.com/en-us/azure/azure-functions/security-concepts#user-management-permissions

However Website contributor (at the minimum) is required to deploy the App Services / Azure Functions. Website Contributor role should be able to delete the App Services / Azure Functions (Per RoleDef, Microsoft.Web/sites/*). WebPlan contributor comes in handy when you manage plans for functions running in App service plan.

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

I hope this helps!

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.