Forum Discussion

RM1234's avatar
RM1234
Copper Contributor
Jun 27, 2022

Azure RBAC permission

My answer is Yes but document perspective it says NO.

would anyone in this forum clarify me? Thanks.

1 Reply

  • ChrisBradshaw's avatar
    ChrisBradshaw
    Iron Contributor
    Jun 29, 2022
    User4 is the Owner of an Azure Subscription. Subscriptions sit inside a tenant, so RBAC permissions assigned on a subscription won’t apply to the parent tenant. See https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/media/az-scopes-billing.png for this hierarchy.

    Also there is no “owner” role in Azure Active Directory ( https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference ), so this permission is irrelevant in this scenario. User4 would need appropriate permissions assigned at the Azure Active Directory level to meet this goal.