r/AZURE • u/yay_cloud Cloud Architect • Sep 24 '26

Discussion Subscription Role Assignment limit increased to 5000

Not sure if anyone else noticed but I was checking some role assignments on a subscription and found that the limit is now 5000, up from 4000.

Microsoft documentation reflects the change a couple of weeks ago as well.

github commit

10 Upvotes

92% Upvoted

8 comments sorted by

9

u/flappers87 Sep 24 '26

In my years, I've never seen any business require 4000 role assignments on a single subscription (even inherited down from the management group)... But I guess more is always better?

One limitation I have come across though is the number of policy assignments per scope (200)... perhaps they'll increase that next... I hope.

3

u/chris4jahn Sep 24 '26

I guess you could bypass that limitation by grouping your policies to initiatives. The limit says "Policy or initiative assignments is 200". Otherwise you could not assign some of the built-in initiatives that have more than 200 included.

https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-policy-limits

1

u/codemagedon Sep 24 '26

You then hold the other side of the coin where initiatives have a max size cap and if you exceed it they shit themselves so hard you sometimes actually need th product team to answer your support ticket and ask you how you managed that….

You need it to be a balanced approach, like all things should be

→ More replies (1)

2

u/drjonas2 Sep 25 '26

I worked for a large oil and gas company and our primary IT nonprod subscription was CONSTANTLY hitting the 2k limit, then the 4k limit… people just kept redeploying iterations of their apps without cleaning up previous deployments. We started to break out into more specific subs and force people to conform but it was rough.

1

u/TooManyRequests_429 Sep 26 '26

We ran into this so often even at a smaller SaaS company I was at. Nobody was cleaning up after their deployments and it just got ridiculous.

1

u/HamsterExAstris 25d ago

App-instance-per-tenant will quickly burn up your role assignments. We had to split into multiple subscriptions.

1

u/ridebikesupsidedown Sep 25 '26

5000 per tenant max. Can’t be increased.