Reputation: 547
What is the correct way to add a user who can create web apps, sql servers, and other resources in an Azure Portal without making them subscription administrators?
Do you just invite them as a user in the AD section and give them roles? and which roles, it looks like Application Administrator and Cloud application administrator?
Upvotes: 1
Views: 58
Reputation: 58931
Yes, the user has to be invited / part of the Azure AD that is linked to your subscription. Then, you can grant him access at a subscription or resource group level.
The right you are looking for is called contributor:
Can create and manage all types of Azure resources but can’t grant access to others.
Further reading: What is role-based access control (RBAC) for Azure resources
Upvotes: 1