Azure-docs: Assignable Scopes seems to incorrectly state you cannot assign to the root

[kilasuit]

The doc's say

An array of strings that specifies the scopes that the custom role is available for assignment. Currently cannot be set to the root scope ("/") or a management group scope. For more information, see AssignableScopes and Organize your resources with Azure management groups.

However on the Assignable Scopes page this shows

Role is available for assignment in all scopes  "/"

So which one is correct?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: eac44e5e-65e1-d989-4afe-0463e8ff51d0
• Version Independent ID: 5665dd03-d06e-ca29-668f-7cb91e5f9ffd
• Content: Custom roles for Azure resources
• Content Source: articles/role-based-access-control/custom-roles.md
• Service: role-based-access-control
• GitHub Login: @rolyon
• Microsoft Alias: rolyon

[ManojReddy-MSFT]

@kilasuit Thanks for reporting this. We are looking into this and will get back to you shortly.

[MarileeTurscak-MSFT]

@rolyon can you explain this? Is it only assignable to the root for built-in scopes, or is there another sort of discrepancy going on?

[rolyon]

Hi @kilasuit
Built-in roles have AssignableScopes set to the root scope ("/"). However, if you are creating your own custom role, you can't set AssignableScopes to the root scope ("/"). You must set to one or more subscriptions or resource groups.
thanks

[MarileeTurscak-MSFT]

We will now proceed to close this thread. If you have further questions feel free to tag us in the comments and we will gladly continue the discussion.