Is there a way to give the user Owner role in subscription scope, but deny/read access to resource groups not made by him?

Question

I want to invite guest user in Azure with permissions that he could do whatever he wants in subscription scope with owner role, but he couldn't view other resource groups that he didn't make or just be able to read them.

Answer 1

currently that's not possible. Deny assigments are limited to a couple of resource types.