title: Can I block Inheritance in Azure
body: <p>can someone please help me with the following question</p>
  
  <p>if I have an Azure Subscription, Resource Group then an Azure Key Vault in that resource group can I block inheritance from the Subscription and Resource group so users with rights at the subscription and resource group level do not automatically inherited the rights (like contributor or owner etc.) to the Key Vault. I see I cannot delete the permissions at the key Vault level as the permissions are inherited. However I may still want someone to have say contributor at the subscription or resource group level but have lesser or no rights on the Key Vault itself</p>
  
  <p>Please advise, thanks in advance
  __AAnotherUser</p>