Defining a cloud permission matrix

[nicholab]

How do you define a cloud permission matrix I am struggling on how to define this as a simple matrix. I am trying to do this for Dev and production environments.

[chaplic]

First time I did this I dreamt all possible use cases and had a billion different roles. Complete waste of time as too granular

 

 

If you are talking azure, have a read only role, something that matches contributed and a limited role for owner (as they can do identity stuff). Then do permissions on resource groups on an as-needs basis.