3 votesGuido Vilariño commented
Having the same issue, it's mind-boggling Azure doesn't support this.
It shouldn't be a requirement for them to be on the same tenant/subscription, as it should be possible to leverage roles and service principals to achieve this. However, since the Portal or CLI does not allow to granularly set any of these, it's currently impossible.
10 votesGuido Vilariño commented
This would be extremely helpful for us. Manually handling each RI is really time-consuming and error prone. It would really make sense for our company's use case