Can we use RBAC to ensure that only VM's for a Particular SKU can be launched from the Azure Account?
Can we use RBAC to ensure that only VM's for a Particular SKU can be launched from the Azure Account?
I am not sure which control exactly you need but if it is only about launching the VM the this is covered. You can Add or remove Azure role assignments to users as explain in the following document:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal
Id this cover your needs or you need something else in addition?
Hello @KamalBernard-9210,
I think, you can try a mix of Azure Policy and RBAC to achieve this requirement. See the policy definition available to limit the SKUs as below 
Here, you can set exclusions for this policy for your selected resource groups at this same page

In RBAC, you can set access for the selected accounts to control the resources in selected RGs only
Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion
Regards,
Manu
@KamalBernard-9210
I just wanted to check in and see if ManuPhilip's post helped answer your question or if you had any other questions.
Thank you for your time!
Please let us know if any of these answers helped resolve your question. If so, please remember to "mark as answer" so that others in the community facing similar issues can easily find a solution.
Hello @KamalBernard-9210,
Any update on this post?
If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.
Thanks,
Manu
Thank you for the information and i will mark it as answered. Thank you again
Thank you for the information and i will mark it as answered. Thank you again
12 people are following this question.