Azure resource custom role assignments
When configuring role assignments on an Azure resource, you're not able to change those assignments which are inherited. I have a situation where I need to lock down a resource so very few have the ability to modify/delete. The list of users who should be able to make changes, does not include those that currently have the 'Owner' role at the subscription level. I'd like to be able to disable inheritance at the resource level and be able to reassign the roles.