Custom Role to Prevent Users making any changes to Azure Web App Network Configuration

Hello terruahmad​ ,

we have two options:

1. have owner access for user on the Azure app service and create Deny permissions to block access related to network related actions. [Not recommended]
2. create the custom role for azure app service, remove the actions related to network and assign it to the user. which will allow the user to perform all actions and not to network section. Please find the below reference JSON where highlighted permissions can be removed and create a custom role. [Recommended]
   

   please check and let me know if it works.