Can Contributor role in Azure see the data of resources like DB, DWH & blobs?

Question

I want to know if we assign somebody as a contributor role on Azure, then can he or she see the data by default for resources?

Answer 1

Of course, the Contributor role can create and manage all of types of Azure resources. But you should add the role under the subscription, if you just add it in e.g. storage, then it will not be able to access the other resource.

See : https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-rbac-roles

Update:

If we try to download the blob in the portal with an contributor role, we can download it successfully. But we should note, the permission is not from the contributor directly, because the contributor has the permission to list account keys, the portal will do the operations on behalf of us. So more accurately, the contributor could not access the blob directly.