CODEWITHSUNDEEP
azureazure-active-directory
xaxa
xaxa

Reputation: 1159

Azure: limited access to external user

We have an azure subscription and keep some important resources (VMs, network interfaces, ...) there. A new engineer from an outsource company is joining us, he'll need to manage resources as part of his job (create/update/remove new VMs,...).

We'd like to organize access in such a way that we have full access to resources that he creates, he has full access to resources that he creates, but he has no access to resources that we create

Is it possible?

Upvotes: 0

Views: 137

Answers (2)

Jason Ye
Jason Ye

Reputation: 13954

It is possible.

Azure Role-Based Access Control (RBAC) enables fine-grained access management for Azure. Using RBAC, you can grant only the amount of access that users need to perform their jobs. This article helps you get up and running with RBAC in the Azure portal.

If you want more details about how RBAC helps you manage access, see what is Role-Based-Access Control.

You can config RABC roles to manager it, also you can set permission to resource group, If you have not grant permission to new user, he can't find that resource.

More information about use RBAC to manage access to your Azure subscription resources, please refer to this article.

Hope this helps.

Upvotes: 2

DrexelX
DrexelX

Reputation: 26

I was speaking with a Azure employee and they said this: You are able to assign roles on the account and some roles have access to specific things and some don't. https://learn.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator I hope that helps!

Upvotes: 1

Related Questions