Search code examples
azureazure-policyazure-rbacazure-blueprints

Azure Blueprint deny read access to some admins


I need to allow only a couple of administrators access to a ressource group, I tried blueprints using the UI but I am only able to lock delete.

  1. Is it possible to block reading a ressource or ressource group?
  2. do I need to use REST API for that?

Solution

  • Is it possible to block reading a resource or ressource group?

    No, we cannot block the access to read a particular resource or a resource group.

    Currently these are all the list of supported resource group locks as mentioned here in the documentation.

    Below is the state of a resource: enter image description here