Hi,
I have an Azure subscription that will be used by multiple AAD users creating various resources.
I created a custom role for them to be able to read at the subscription level and create resource groups in that subscription.
The problem is that once the resource group is created that person cannot create anything in the group as contributor rights are now needed on the new resource group.
How do I go about setting "CREATOR OWNER" (or something similar as it is done on MS files/folders) permission so that only the person who created the group has admin access over that group only.
Thanks all
Shane
