Account based image pull permission in Azure Container Registry

Question

Do we have any mechanism to allow user's to pull specified images only by using same Azure container registry.

As an example, let's say we have 2 clients (client1@mydomain.com, client2@mydomain.com) and 3 images (image A, Image B, Image C) in the same azure container registry (mydomain.azurecr.io).

• Scenario

  1. client1@mydomain.com allow to pull image A, Image B, from ACR (mydomain.azurecr.io) and restrict to pull Image C.

  2. client2@mydomain.com to allow Image C from ACR (mydomain.azurecr.io) and restrict to pull image A, Image B.

Please refer the below diagram,

diagram

Answer 1

No, you cannot achieve it in ACR. ACR only support to set permissions in the ACR level, not in the repositories.