I'm preparing to run a training session focused on RAG chatbots where participants will be using the Microsoft Azure Portal. My idea is to onboard them into their own resource groups as contributors, so they have plenty of freedom while being unable to affect the resources of others. However, I want to strike a balance: I don't want to impose too many restrictions on them, but I also need to implement some kind of budget limit as a safety net. I know about RBAC roles, but I'd prefer not to get bogged down adjusting permissions during the training. Any advice on how to achieve this would be greatly appreciated!
1 Answer
One thing to keep in mind is that Azure consumption stats can take up to 24 hours to reflect. If your workshop is just for a day, it could be challenging to monitor real-time costs. Consider implementing a policy that blocks the deployment of expensive resource SKUs to manage costs better.

Thanks for the tip!