We have an Azure Management Group X with 200 subscriptions. Is there a way I can give a role assignment to App in scope X by excluding particular 15 subscriptions?

CodePudding user response：

AFAIK it is not possible give a role assignment to App in scope X by excluding particular few subscriptions.

Once you assigned scope of managed group it will include all the subscription there won’t be option filter out the subscription.

To achieve your requirement, you can create sub manage group under root manage group add specific subscription in sub manage group that you want.

Then add that sub manage group in the scope.

You can follow this document to understand the hierarchy of management group.