← cd ~/compare
// compare · azure roles
Owner vs Contributor
Two Azure built-in roles that are often confused, compared permission by permission.
In short: Owner has 1 actions. Contributor has 1 actions, 11 NotActions. Assign the one with less access that still covers the job.
| Owner | Contributor | |
|---|---|---|
| What Microsoft says | Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. | Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries. |
| Size | 1 actions | 1 actions, 11 NotActions |
Permissions only Owner lists (0)
None.
Permissions only Contributor lists (0)
None.
Azure roles use wildcards such as *, and NotActions take permissions away, so a role can cover an action without listing it. Check the role pages for the full picture.