question

AtiqurChowdhury-4308 avatar image
0 Votes"
AtiqurChowdhury-4308 asked AtiqurChowdhury-4308 commented

Customer wants to ensure security of their Tenant-data and they want to ensure they have only access.

Azure Plan (Tenant) --Subscription 1 Provider (CSP) and customer both have access --Subscription 2 Provider (CSP) and customer both have access --Resources Group Only Customer has access Customer wants to ensure security of their data and they want to ensure they have only access. Please guide me with information or documents

azure-security-centerazure-rbac
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered AtiqurChowdhury-4308 commented

@AtiqurChowdhury-4308 If you are looking for a access related approach towards Azure subscriptions, you should definitely check out our module in Managing Access to Azure Subscription with RBAC

You can then use the corresponding Azure Roles or Azure AD roles as per you need.
80500-image.png


Here is how you can assign the roles.



If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.




image.png (93.3 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.


Global Admin/user access admin (elevated access) automatically have access all child. I want stop their access at the point of subscription level. How to assign users have full access in azure ad tenant to resources group/resources from customer side and (CSP) provider have access till subscription level no right to grant their access themselves. please explain briefly.

I want make sure it is secure for customer and CSP-provider has only subscription level access.

What i need check to ensure this.

0 Votes 0 ·