Hello Team, Do you have an idea how can I configure IAM for Storage account in Azure, in my case to give role reader for some container in storage account ?

does this help: https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/roleassignment/ ?

@blue-potato-57538 hello 🙂 I used that in past to give AcrPull role for ML Wokrspace, that was my idea to try to use, but I wasn't sure, I need to test it. Before test I want to try to find some examples, or some other ideas

There are some examples there, you could have them as starting point: https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/roleassignment/#create-role-assignment-for-resource https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/roleassignment/#create-role-assignment-for-resource-group I mean those will be the starting point, and if you are stuck you can ask around for help, providing code that is not working. Personally i didn't used this resource for the moment, to give you some examples, but those will be the starting point for me as well