Block AzureRM PowerShell Module

Question

Is there a way to block AzureRM PowerShell module commands from being executed by certain Azure AD users somewhere in Azure group policy? Or is there a way to do this with PowerShell tools?

Answer 1

To my knowledge, Azure Resource Manager PowerShell scripts use the same permissions as the Azure portal, so no, you cannot prevent a user from running a PowerShell commandlet and still let them perform the same actions on the Azure portal. This link provides more information about managing Windows Azure Permissions