Forum Discussion
Deny Assignment in Read / Access ( DenySettingsMode )
Hello, I would like to confirm with you that it is currently not supported within Azure through any api / cli to set a denyRead type of assignment to a resource ? So are we really only limit...
You may also consider deny-settings-excluded-actions parameter to exclude read actions (such as Microsoft.Resources/*/read
- As far as i understand, that parameter determines which actions are excluded from the deny assignment.
which is weird considering that the deny assignment itself is so limited, but it would encompass a situation where you deny write assignment but authorize an action like "rename" for instance.
