having trouble with setting inherited permissions

Question

having trouble with setting inherited permissions. contributors are not inheriting from resource group to child resources.

Answer 1

Hello Yulien,

Thanks for reaching out to Microsoft Q&A forums,

It looks like inherited permissions are not applying as expected for contributors in your resource group. Here’s how you can troubleshoot and fix this issue:

1. Verify Role Assignment Scope: Navigate to Azure Portal → Resource Group → Access Control (IAM) → Role Assignments. Ensure the Contributor role is assigned at the Resource Group level.
2. Check for Explicit Deny Assignments: In Access Control (IAM), check if there are deny assignments at the resource level that could override inherited permissions.
3. Manually Trigger Permission Propagation: Remove the Contributor role, wait a few minutes, and reassign it at the Resource Group level to reapply inheritance.
4. Review Azure AD Group Memberships: If permissions are assigned to an Azure AD Group, ensure the user is a direct member of the group.
5. Check Role Assignments at Lower Levels: If a conflicting role is explicitly set at the resource level, it might override the inherited permissions.

Reference Documentation:

• Troubleshoot Azure Role Assignments : https://learn.microsoft.com/en-us/azure/role-based-access-control/troubleshooting?tabs=bicep

Let me know if you need further assistance! Also don't forget to accept the answer if it was helpful .

Thanks,
Pradeep