Force all Azure access through Management Groups

Dylan James 1 Reputation point
2020-08-26T20:02:29.85+00:00

Hi everyone,

We are looking to force all Azure access assignments to go through management groups instead of at the subscription level. Basically we don't want access to be able to be assigned per subscription and want to block that capability. This way we are forced to grant access at the Management Group level instead.

Is there any way to do this, maybe via a Policy somehow?

Thanks for the time!

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions