CODEWITHSUNDEEP
azurecloudazure-policyazure-rbacazure-role-environment
Sulas
Sulas

Reputation: 59

Is there a way to give the user Owner role in subscription scope, but deny/read access to resource groups not made by him?

I want to invite guest user in Azure with permissions that he could do whatever he wants in subscription scope with owner role, but he couldn't view other resource groups that he didn't make or just be able to read them.

Upvotes: 0

Views: 85

Answers (1)

AlfredoRevilla-MSFT
AlfredoRevilla-MSFT

Reputation: 3505

currently that's not possible. Deny assigments are limited to a couple of resource types.

Upvotes: 0

Related Questions