Hello,

I would like to confirm with you that it is currently not supported within Azure through any api / cli to set a denyRead type of assignment to a resource ? 

So are we really only limited to these 3 options : denyDelete, denyWriteAndDelete, None

KnownDenySettingsMode enum | Microsoft Learn

I checked the cli and it correlates. 

I find the concept of denyAssignment to be tremendously valuable from a security perspective, why is it so limited, and doesn’t let us expand to other rights such as read or access ? 

It would be a much appreciated addition.

Thank you !

​Hello, I would like to confirm with you that it is currently not supported within Azure through any api / cli to set a denyRead type of assignment to a resource ?  So are we really only limited to these 3 options : denyDelete, denyWriteAndDelete, NoneKnownDenySettingsMode enum | Microsoft Learn I checked the cli and it correlates.  I find the concept of denyAssignment to be tremendously valuable from a security perspective, why is it so limited, and doesn’t let us expand to other rights such as read or access ?  It would be a much appreciated addition. Thank you !   Read More

​