Need some Expert advice to understand how is Contrubitor permissions inferior to Admin

Javed Balganoor 1 Reputation point
2021-02-18T11:48:39.73+00:00

We have a project where it needs VM's, AKS, Casandra, APIs and postgre. the project owner needs to keep the admin role. And is offering a contributor access to access this corporate set up for Azure. While i reviewed the documentation and understand the High level can / cant dos, looking for some real life experience if someone can share of any issues / bottlenecks one sees while using a contributor role.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
710 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,531 Reputation points Microsoft Employee
    2021-02-22T23:02:28.743+00:00

    @Javed Balganoor
    Thank you for detailed post!

    When it comes to the Contributor built-in role, I haven't had any issues using this. I'd keep in mind that this role does grant full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.

    If your users are solely going to be contributing to the project and don't need to assign/manage roles then I don't see any issues with using the Contributor role.

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.