How to authorize users

Hello everyone, I’m playing around with HF on Azure.

One thing I’m struggling with is how to grant access for users. I have granted some roles on the main resource group. Whenever I try to create a hugging face endpoint however, it creates a managed resource group under the hood and it does not propagate the credentials from original resource group. Thus it then defaults to the subscription default.

Adding roles manually to the managed resource group is also not possible, because of the deny assignment created.

tl;dr → How do I grant people access to my hugging face resources without granting them permissions on the Azure subscription level.

Thanks!