Is it possible to deny the access to Cost Management?

[DomAnnicette]

Hi,

I try to deny the access to Cost Management for a user.

I don't want to block the access to the Azure Portal.

I don't want to remove the current role of this specific user.

I found that this could be achieved using Azure Blueprint. But I can't see where to apply the deny permission.

Does anyone can help?

Thanks. :) 

[#2]

you could create a custom role https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-create

[#3]

@DomAnnicette 

Custom role may fulfill your requirement:

Azure custom roles - Azure RBAC | Microsoft Learn

[#4]

@DomAnnicette 

To create a custom role in Azure with no permission to cost management, you can follow these steps:

1. Open the Azure Portal and go to the "Azure Active Directory" service.

2. Select "Roles and administrators" from the left-hand menu.

3. Click on the "New custom role" button at the top of the page.

4. Give your custom role a name and description.

5. Under "Permissions", select "Add permissions".

6. In the "Add permissions" pane, search for "Cost Management + Billing" and uncheck all the permissions under this category.

7. Once you have unchecked all the permissions related to cost management, click "Add permissions" to save the changes.

8. Review the other permissions assigned to the custom role and make any necessary adjustments.

9. Once you are satisfied with the custom role configuration, click "Create" to save the role.

Your custom role is now created without any permissions related to cost management. You can assign this role to users or groups as needed.