In Azure, how to prevent a user create a Network Interface Card but not modify it?

user_8539389 0
Viewed 33

I want to give a specific RBAC to a user so that he can create a NIC but not to modify. As a matter of fact, what it is aimed is that he shouldn't have permission to change the dynamic ip to static ip and change the ip address of the NIC.

I have checked the RBACs of NIC, but it seems that if he has Microsoft.Network/networkInterfaces/write permission , he can create a network interface or update an existing network interface. So this Rbac is not as detailed as i want.

enter image description here If it cannot be done on rbac level, can an Azure Policy be deployed to prevent it?

Any idea?

nic rbac azure networking
0 Answers
Related