Account based image pull permission in Azure Container Registry

1
votes

Do we have any mechanism to allow user's to pull specified images only by using same Azure container registry.

As an example, let's say we have 2 clients (client1@mydomain.com, client2@mydomain.com) and 3 images (image A, Image B, Image C) in the same azure container registry (mydomain.azurecr.io).

  • Scenario

    1. client1@mydomain.com allow to pull image A, Image B, from ACR (mydomain.azurecr.io) and restrict to pull Image C.

    2. client2@mydomain.com to allow Image C from ACR (mydomain.azurecr.io) and restrict to pull image A, Image B.

Please refer the below diagram,

diagram

1
azuredockercontainersazure-container-serviceazure-container-registry

1 Answers

1
votes

No, you cannot achieve it in ACR. ACR only support to set permissions in the ACR level, not in the repositories.