Engineering ideas, experiments and lessons from the real world.

Azure Landing Zone IAM: Why I Avoid the Owner Role (And What I Use Instead)

Owner is the fastest way to unblock someone in a new Azure subscription, and the fastest way to lose track of who can do what across your landing zones. Here's how I actually think about IAM while building landing zone modules in Terraform.

September 14, 2026· 9 min read