Resource Restriction User Group

Connor Sullivan 1 Reputation point Microsoft Employee
2022-03-28T17:43:20.907+00:00

Hello,

I am wanting to create a user group in Azure that I can add users to which will restrict the deployment of specific resources. I am mainly interested in restricting deployment of Public IP Address resources but there may be others I would like to add eventually. Does anyone have a suggestion on how this can be accomplished?

Thanks!
-Connor

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
697 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,094 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,496 Reputation points Microsoft Employee
    2022-04-05T20:47:32.05+00:00

    @Connor Sullivan
    Thank you for your post and I apologize for the delayed response!

    When it comes to restricting users from deploying resources, you can definitely leverage Azure role-based access control (Azure RBAC) to manage who has access to Azure resources, what they can do with those resources (i.e. create/deploy, deleted, view, etc.), and what areas they have access to. Azure RBAC is an authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources.

    Here are some examples of what you can do with Azure RBAC:

    • Allow one user to manage virtual machines in a subscription and another user to manage virtual networks
    • Allow a DBA group to manage SQL databases in a subscription
    • Allow a user to manage all resources in a resource group, such as virtual machines, websites, and subnets
    • Allow an application to access all resources in a resource group

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments