RBAC for assigning IAM RRS feed

  • Question

  • I have a user who is a contributor to an Azure subscription.  He created a resource group, but now he must be able to fully leverage that group, including assigning other users access to resources within that group.  What WBAC permission does he need?  I already made him an owner of the resource group.

    Thank you,


    • Edited by farslayer9 Wednesday, March 18, 2020 2:29 AM
    Tuesday, March 17, 2020 8:36 PM

All replies

  • Make a user an administrator of an Azure subscription, by assigning them the Owner role at the subscription scope. The Owner role gives the user full access to all resources in the subscription, including the permission to grant access to others. where as contributor role, Lets you manage everything except granting access to resources.
    Ref Doc.


    Wednesday, March 18, 2020 4:12 AM
  • Hello,


    If you think your question has been answered, please click "Mark as Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.


    Best regards


    Friday, May 8, 2020 6:48 AM