How to create view only access for my IT person?

Jalpa Patel 0 Reputation points
2026-09-09T00:54:14.8333333+00:00

Could someone please help me to create view only access for my IT person?

Azure Role-based access control
Azure Role-based access control

An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.

0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-09-09T00:54:24.6033333+00:00

    For Azure DevOps-style view-only access, add the person to a Readers group so they can view content without edit rights.

    If dashboard access is also needed without allowing changes:

    1. Go to Azure DevOps Project Settings > Teams.
    2. Create a new team and add the person as a member.
    3. Go to Project Settings > Dashboards.
    4. Select that new team.
    5. Turn off Edit dashboard and Delete Dashboard.
    6. Remove the person from any other team that still has dashboard edit permissions enabled.

    For test-related visibility, the Readers group allows viewing work items and test plans. The accepted guidance also notes that basic access is needed to view dashboards and test plans.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. SHOUMIK CHAKRAVARTY 575 Reputation points
    2026-09-09T01:43:30.9033333+00:00

    The AI answer provided earlier appears to be incorrect. It describes how to set up view‑only access in Azure DevOps, but your question is about view‑only access in the Azure Portal, which uses Azure RBAC. The correct solution is to assign the Reader role through Access control (IAM).

    To give someone view‑only access in Azure, assign them the Reader role at the scope you want them to see (subscription, resource group, or a single resource). All of this is done through Access control (IAM) in the Azure Portal.

    1. Open the Azure Portal

    Go to https://portal.azure.com Sign in with an account that can assign roles.

    2. Navigate to the correct scope

    Choose how much access the person should have:

    Subscription‑wide: Subscriptions → select your subscription

    Resource‑group‑level: Resource groups → select the group

    Single resource: Open the resource directly

    3. Open Access control (IAM)

    Left menu → Access control (IAM)

    4. Add the Reader role

    Access control (IAM) → Add → Add role assignment Select Reader → Next

    5. Assign it to your IT person

    Under Members, choose User Search for their name or email Select them → Review + assign

    This gives them full visibility at the chosen scope without any ability to modify resources.

    Help make this community better for everyone: if this answer resolved your issue, please accept it or leave an upvote. If not, share more details in a comment so we can continue the discussion and find the right solution.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.