Azure-docs: Scope of maximum role assignments isn't clear.

[harouny]

In documentation the following sentence is mentioned: "You can have up to 2000 role assignments in each subscription and 500 role assignments in each management group."

However, it's not clear if role assignments at resource group level or resource level counts towards the maximum "2000 role assignments in each subscription" or is the 2000 is only for subscription level role assignments.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 1e21d4b9-f574-e01d-8676-fb23d6a4ab67
• Version Independent ID: 85e74a1b-3bb3-8bdd-8fca-38256c8a46c1
• Content: What is Azure role-based access control (Azure RBAC)?
• Content Source: articles/role-based-access-control/overview.md
• Service: role-based-access-control
• GitHub Login: @rolyon
• Microsoft Alias: rolyon

[SaurabhSharma-MSFT]

@harouny Thanks for your feedback! We will investigate and update as appropriate.

[MarileeTurscak-MSFT]

They are included in the total. I made a pull request to make this more explicit in the text, but still think it's pretty clear. https://github.com/MicrosoftDocs/azure-docs-pr/pull/114379

If you go to Subscriptions > Access Control (IAM) > Role Assignments you can see how much of your quota you have used and see which resources the assignments have been applied to.

Example:

[MarileeTurscak-MSFT]

@rolyon is confirming with the RBAC team so reassigning this.

[rolyon]

Hi @harouny
Role assignments at resource group level or resource level do count towards your 2000 maximum per subscription.
thanks

[AElharouny]

Thanks @rolyon for clarification. With more use cases for Managed Identity and Azure AD Authentication i.e. on storage entities, Service bus entities etc, the 2000 limit seems pretty restricting, is there a way to increase the limit?

Sorry if that's not the right channel for the question.

[rolyon]

@harouny
Unfortunately the limit can't be increased. If you are getting close to the limit, here are some options for reducing the number of role assignments:
https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting#azure-role-assignments-limit

[rolyon]

Hi @harouny
We published a doc update that hopefully makes this more clear.
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
thanks

[rolyon]

please-close