---
title: "Discussion on \"Least-privilege Azure RBAC for read-only architecture review\" | Hashnode"
description: "Discussion on \"Least-privilege Azure RBAC for read-only architecture review\". A custom role with */read plus two actions, scoped to one resource group: everything a read-only scanner needs, and nothing it doesn't."
url: "https://hashnode.com/posts/least-privilege-azure-rbac-architecture-review/6ae9f83e4e865b29894cc6ae"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Least-privilege Azure RBAC for read-only architecture review](https://cloudeval.hashnode.dev/least-privilege-azure-rbac-architecture-review?utm_source=hashnode&utm_medium=feed)

A custom role with \*/read plus two actions, scoped to one resource group: everything a read-only scanner needs, and nothing it doesn't.

Nov 3 · 9 min read · cloudeval.hashnode.dev  
Read the article

-   [#azure](https://hashnode.com/tag/azure)
-   [#security](https://hashnode.com/tag/security)
-   [#devops](https://hashnode.com/tag/devops)
-   [#cloud](https://hashnode.com/tag/cloud)
-   [#rbac](https://hashnode.com/tag/rbac)

## Written by

[Prateek Singh](https://hashnode.com/@prateekkumarsingh)

@prateekkumarsingh

  
[View profile](https://hashnode.com/@prateekkumarsingh)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.