Property of a role definition stating at which management groups, subscriptions, resource groups or resources a custom role may be assigned.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains AssignableScopes in context, with comparison tables and the common traps.
Terms in this definition
- property
In VCF Operations, an attribute describing how an object is configured, such as its vCPU count. Unlike a metric, it captures state rather than performance over time, and it can feed symptom definitions, views, dashboards and reports.
- Role definition
A set of permissions, for example read, write and delete, that is either built in (Owner, Contributor, Reader and others) or custom. People normally just call it a role.
- Management groups
Sit above subscriptions so that Azure Policy and RBAC assignments are inherited downwards. A management group is always confined to one tenant.
- Custom role
Built from the preset permissions that the built-in Microsoft Entra roles also use, and assignable to the whole tenant, an administrative unit or one object. Each user it is assigned to needs Microsoft Entra ID P1; Azure custom roles are a separate thing.