{"id":892,"date":"2019-11-13T00:00:00","date_gmt":"2019-11-13T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/azure-container-registry-preview-of-repository-scoped-permissions"},"modified":"2025-06-26T23:44:17","modified_gmt":"2025-06-27T06:44:17","slug":"azure-container-registry-preview-of-repository-scoped-permissions","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/","title":{"rendered":"Azure Container Registry: preview of repository-scoped permissions"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/aka.ms\/acr\" target=\"_blank\" rel=\"noopener\">Azure Container Registry<\/a> (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on <a href=\"https:\/\/feedback.azure.com\/forums\/903958-azure-container-registry\/suggestions\/31655977-configure-permissions-at-a-repository-level\" target=\"_blank\" rel=\"noopener\">UserVoice<\/a>. In this release, we have a <a href=\"https:\/\/aka.ms\/acr\/repository-permissions\" target=\"_blank\" rel=\"noopener\">command-line interface (CLI) experience<\/a> for you to try and provide <a href=\"https:\/\/github.com\/azure\/acr\/issues\" target=\"_blank\" rel=\"noopener\">feedback<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ACR already supports several <a href=\"https:\/\/aka.ms\/acr\/authentication\" target=\"_blank\" rel=\"noopener\">authentication options using<\/a> identities that have <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/container-registry\/container-registry-roles\" target=\"_blank\" rel=\"noopener\">role-based access<\/a> to an entire registry. However, for multi-team scenarios, you might want to consolidate multiple teams into a single registry, limiting each team\u2019s access to their specific repositories. Repository scoped RBAC now enables this functionality.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are some of the scenarios where repository scoped permissions might come in handy:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><p>Limit repository access to specific user groups within your organization. For example, provide write access to developers who build images that target specific repositories, and read access to teams that deploy from those repositories.<\/p><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><p>Provide millions of IoT devices with individual access to pull images from specific repositories.<\/p><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><p>Provide an external organization with permissions to specific repositories.<\/p><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In this release, we have introduced tokens as a mechanism to implement repository scoped RBAC permissions. A token is a credential used to authenticate with the registry. It can be backed by username and password or Azure Active Directory(AAD) objects like Azure Active Directory users, service principals, and managed identities. For this release, we have provided tokens backed by username and password. Future releases will support tokens backed by Azure Active Directory objects like Azure Active Directory users, service principals, and managed identities. See Figure 1.<\/p>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\" alt=\"repo\" style=\"border-radius:0px\" title=\"repo\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">*Support for Azure Active Directory (AAD) backed token will be available in a future release.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Figure 1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Figure 2 below describes the relationship between tokens and scope-maps.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><p>A token is a credential used to authenticate with the registry. It has a permitted set of actions which are scoped to one or more repositories. Once you have generated a token, you can use it to authenticate with your registry. You can do a docker login using the following command:<\/p><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">docker login &#8211;username mytoken&nbsp;&#8211;password-stdin myregistry.azurecr.io.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><p>A scope map is a registry object that groups repository permissions you apply to a token. It provides a graph of access to one or more repositories. You can apply scoped repository permissions to a token or reapply them to other tokens. If you don&#8217;t apply a scope map when creating a token, a scope map is automatically created for you, to save the permission settings.<\/p><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A scope map helps you configure multiple users with identical access to a set of repositories.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><img decoding=\"async\" title=\"Relationship between tokens and scope-maps\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/3a2a2a15-0ccf-4f36-84eb-5df895084c12.webp\" alt=\"Relationship between tokens and scope-maps\"><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Figure 2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As customers use containers and other <a href=\"https:\/\/github.com\/opencontainers\/artifacts\" target=\"_blank\" rel=\"noopener\">artifacts<\/a> for their IoT deployment, the number of devices can grow into the millions. In order to support the scale of IoT, Azure Container Registry has implemented repository based RBAC, using tokens (figure 3). Tokens are not a replacement for service principals or managed identities. You can add tokens as an additional option providing scalability of IoT deployment scenarios.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/acr\/repo-permissions\" target=\"_blank\" rel=\"noopener\">This article<\/a> shows how to create a token with permissions restricted to a specific repository within a registry. With the introduction of token-based repository permissions, you can now provide users or services with scoped and time-limited access to repositories without requiring an Azure Active Directory identity. In the future, we will support tokens backed by Azure Active Directory objects. Check out this new feature and let us know your feedback on <a href=\"https:\/\/github.com\/azure\/acr\/issues\" target=\"_blank\" rel=\"noopener\">GitHub<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/e75dd6ac-4c51-4c77-be4f-165e028976f9.webp\" alt=\"Tokens\" style=\"border-radius:0px\" title=\"Tokens\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Figure 3<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"availability-and-feedback\">Availability and feedback<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure CLI experience is now in preview. As always, we love to hear your feedback on existing features as well as ideas for our product roadmap.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/acr\/roadmap\" target=\"_blank\" rel=\"noopener\">Roadmap<\/a>: For visibility into our planned work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/acr\/uservoice\" target=\"_blank\" rel=\"noopener\">UserVoice<\/a>: To vote for existing requests or create a new request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/acr\/issues\" target=\"_blank\" rel=\"noopener\">Issues<\/a>: To view existing bugs and issues, or log new ones.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/docs.microsoft.com\/azure\/container-registry\/\" target=\"_blank\" rel=\"noopener\">ACR documents<\/a>: For ACR tutorials and documentation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1470],"tags":[],"audience":[3055,3056],"content-type":[1465],"product":[1625],"tech-community":[],"topic":[],"coauthors":[267],"class_list":["post-892","post","type-post","status-publish","format-standard","hentry","category-containers","audience-developers","audience-it-implementors","content-type-announcements","product-container-services","review-flag-1-1680286581-825","review-flag-2-1680286581-601","review-flag-3-1680286581-173","review-flag-alway-1680286580-106","review-flag-iot-1680286585-835","review-flag-new-1680286579-546"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2019-11-13T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-27T06:44:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\" \/>\n<meta name=\"author\" content=\"Reshmi Mangalore\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Reshmi Mangalore\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/reshmi-mangalore\/\",\"@type\":\"Person\",\"@name\":\"Reshmi Mangalore\"}],\"headline\":\"Azure Container Registry: preview of repository-scoped permissions\",\"datePublished\":\"2019-11-13T00:00:00+00:00\",\"dateModified\":\"2025-06-27T06:44:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\"},\"wordCount\":623,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\",\"articleSection\":[\"Containers\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\",\"name\":\"Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\",\"datePublished\":\"2019-11-13T00:00:00+00:00\",\"dateModified\":\"2025-06-27T06:44:17+00:00\",\"description\":\"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Containers\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/containers\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Azure Container Registry: preview of repository-scoped permissions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117\",\"name\":\"shakir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"caption\":\"shakir\"},\"sameAs\":[\"https:\/\/azure.microsoft.com\"],\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog","description":"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/","og_locale":"en_US","og_type":"article","og_title":"Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog","og_description":"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2019-11-13T00:00:00+00:00","article_modified_time":"2025-06-27T06:44:17+00:00","og_image":[{"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp","type":"","width":"","height":""}],"author":"Reshmi Mangalore","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Reshmi Mangalore","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/reshmi-mangalore\/","@type":"Person","@name":"Reshmi Mangalore"}],"headline":"Azure Container Registry: preview of repository-scoped permissions","datePublished":"2019-11-13T00:00:00+00:00","dateModified":"2025-06-27T06:44:17+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/"},"wordCount":623,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp","articleSection":["Containers"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/","name":"Azure Container Registry: preview of repository-scoped permissions | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp","datePublished":"2019-11-13T00:00:00+00:00","dateModified":"2025-06-27T06:44:17+00:00","description":"The Azure Container Registry (ACR) team is rolling out the preview of repository scoped role-based access control (RBAC) permissions, our top-voted item on UserVoice.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#primaryimage","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/11\/c5b32d7d-72b0-47eb-b249-b75288a4498c.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-preview-of-repository-scoped-permissions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"Containers","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/containers\/"},{"@type":"ListItem","position":3,"name":"Azure Container Registry: preview of repository-scoped permissions"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117","name":"shakir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4","url":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","caption":"shakir"},"sameAs":["https:\/\/azure.microsoft.com"],"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=892"}],"version-history":[{"count":1,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/892\/revisions"}],"predecessor-version":[{"id":43984,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/892\/revisions\/43984"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=892"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=892"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=892"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=892"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=892"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=892"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}