Forum Discussion
Access to subscription resources.
Hello,
I want to ask you all about subscription access for users outside.
The idea is to split our Azure subscription from one global to one per coutry. We are going to do some stuff there but we might need to give access to resources for employes from other countries to ex. show them what we did, how it works and let them play with it.
Example:
Right now we are doing some R&D on global account but it will be much better to have our own for each country. In future, we might need to share access to that environment/product etc. to other employes outside our subscription.
Why?
We want to have some kind of indicator which will tell us how many hours/connections was done and all that stuff.
Why not resource group?
It will be much easier to just give access to "our" own Azure env rather than specifying roles, telling what to edit and what not etc. We have some production stuff there etc...
So, is it possible to give access to these resources for employes from other subscriptions with "full" functionality of resources inside? Can connections to VM's or Kube clusters will be possible?
Thank you!
- hello it's no very clear for me , but you can try to create administrative unit or Groups to assign on your subscription
So just to confirm. If we split it, others still can see it without moving them from one subscription to another, if we grant them permission?
Example:
Manager from other subscription/Country, wants to see and play with the project. If I give him permission, he will be able to open it, right? Will it be somehow limited?
you can manage right with PIM
https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
