Enable the ability to create resource groups

Question

I would like to give members of a specific role the ability to create resource groups. Can this be achieved without giving users the co-owner role at the subscription level?

Answer 1

You can grant them contributor rights on the specific Azure subscription, they don't have to be co-owner. This is the least-privilege built-in role available that allows you to create resource groups.

However, you could also create a custom role with only one action:

Microsoft.Resources/subscriptions/resourceGroups/write

Read more here: Custom roles for Azure resources