Resource Access and Permissions

Resource Lens analyzes only the Azure scopes selected by an administrator and exposes role management in the portal so access can be reviewed or revoked.

Access model

• Reader is required to inventory resources and configuration in the selected scope.
• Cost Management Reader adds billing and usage context.
• Monitoring Reader adds metric definitions and utilization history.
• Advisor Reviews Reader adds Azure Advisor recommendation context without allowing review-state changes.
• Administrators can grant or revoke optional roles per subscription or remove all Resource Lens access from a subscription.
• Resource Lens does not request permissions to create, update, stop, resize, or delete customer resources.