Forum Discussion

RazTheOne's avatar
RazTheOne
Copper Contributor
May 03, 2025

Azure role for managing Visual Studio subscribers

Granting Help Desk users the ability to manage and provisioning Visual Studio licenses from the VS admin centre.  I prefer not to assign the User Access Administrator role; so I am looking on what are the key RBAC configuration only for the sole purpose of managing user license for Visual Studio. Out VS subscription is attached to an Azure sub. (https://manage.visualstudio.com)

azure
developer tools

3 Replies

  • Kidd_Ip's avatar
    Kidd_Ip
    MVP
    May 06, 2025

    Would suggest following RBAC as best practice:

     

    • Microsoft.VisualStudio/subscriptions/read
    • Microsoft.VisualStudio/subscriptions/write
    • Microsoft.VisualStudio/subscriptions/assign
    • Exclude broader administrative permissions to prevent unnecessary access as needed base approach
    • RazTheOne's avatar
      RazTheOne
      Copper Contributor
      May 06, 2025

      Kidd_Ip, I tried to create a custom rbac using those settings, but it failed, I was not able as it does not recognize Microsoft.VisualStudio

Resources