Is there a way to give the user Owner role in subscription scope, but deny/read access to resource groups not made by him?

81 views Asked by At

I want to invite guest user in Azure with permissions that he could do whatever he wants in subscription scope with owner role, but he couldn't view other resource groups that he didn't make or just be able to read them.

1

There are 1 answers

0
AlfredoRevilla-MSFT On BEST ANSWER

currently that's not possible. Deny assigments are limited to a couple of resource types.