Revision history [back]

To assign Azure RBAC to a security group in Azure AD at the level of a resource group:

1. Go to the Azure portal and navigate to the Resource Group you want to assign RBAC to.
2. Click on the Access control (IAM) tab in the left-hand menu.
3. Click on the + Add button and select Add role assignment.
4. In the Add role assignment blade, select the role you want to assign to the group (for example, Contributor).
5. In the Select box under Assign access to, select Azure AD user, group, or service principal.
6. In the next Select box, select the security group you want to assign the role to.
7. Click the Save button to complete the assignment.

Once you have completed these steps, members of the security group will have the role you assigned to it for the resource group. Note that you will need the appropriate permissions to assign these roles.