question

IDAVANG-7923 avatar image
0 Votes"
IDAVANG-7923 asked IDAVANG-7923 commented

RG Deny assigment with all participants rule lockout

There is one resource group, that is locked out from modifying or deleting anything. Can only create and add, but not remove.
Noticed there is Deny assigment rule with All participats, deny access which I can not modify even as root admin.
How to remove or edit rule?

resource ID
/subscriptions/7874e486-84c1-4761-951f-9189eb1a4439/resourceGroups/mrg-microsoft-community-training-20201104150423

Deny assigment
/subscriptions/7874e486-84c1-4761-951f-9189eb1a4439/resourceGroups/mrg-microsoft-community-training-20201104150423/providers/Microsoft.Authorization/denyAssignments/a10879cb-d4de-4751-a3be-ffbc34f327f8

azure-resource-mover
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@IDAVANG-7923 - Thank you for reaching out to us!

Are you using Azure resource mover to move resources within Azure?

From the details provided above, it seems permission issue.

Appreciate if you could provide more details such as:

What are you trying to accomplish?
What permissions do you own at subscription level?

0 Votes 0 ·

I own
User Access Administrator Root (Inherited)
But still can not remove other user role.

At different resource groups everything is fine, just this one has some deny policy. And I can not edit it or remove it.

0 Votes 0 ·

0 Answers