Merge pull request #298816 from rolyon/rolyon-rbac-limits-deny-assignments

[Azure RBAC] System-managed deny assignments limit

Author: prmerger-automator[bot]

articles/role-based-access-control/deny-assignments.md

@@ -5,7 +5,7 @@ author: rolyon
 manager: femila
 ms.service: role-based-access-control
 ms.topic: conceptual
-ms.date: 03/12/2024
+ms.date: 04/24/2025
 ms.author: rolyon
 ms.reviewer: bagovind
 ---
@@ -21,7 +21,7 @@ This article describes how to list deny assignments.
 
 ## How deny assignments are created
 
-Deny assignments are created and managed by Azure to protect resources. You can't directly create your own deny assignments. However, you can specify deny settings when creating a deployment stack, which creates a deny assignment that is owned by the deployment stack resources. Deployment stacks is currently in preview. For more information, see [Protect managed resources against deletion](../azure-resource-manager/bicep/deployment-stacks.md#protect-managed-resources).
+Deny assignments are created and managed by Azure to protect resources. You can't directly create your own deny assignments. However, you can specify deny settings when creating a deployment stack, which creates a deny assignment that is owned by the deployment stack resources. For more information, see [Protect managed resources](../azure-resource-manager/bicep/deployment-stacks.md#protect-managed-resources) and [Azure RBAC limits](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-rbac-limits).
 
 ## Compare role assignments and deny assignments
 

articles/role-based-access-control/whats-new.md

@@ -5,7 +5,7 @@ author: rolyon
 manager: femila
 ms.service: role-based-access-control
 ms.topic: whats-new
-ms.date: 04/07/2025
+ms.date: 04/24/2025
 ms.author: rolyon
 
 ---
@@ -18,6 +18,7 @@ This article provides information about new features and documentation improveme
 
 | Date | Area | Description |
 | --- | --- | --- |
+| April 2025 | Limits | Added system-managed deny assignments limit. See [Azure RBAC limits](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-rbac-limits). |
 | April 2025 | Roles | Added [Compute Fleet Contributor](built-in-roles/compute.md#compute-fleet-contributor) role. |
 | April 2025 | Roles | Added [Azure Red Hat OpenShift](built-in-roles/containers.md#azure-red-hat-openshift-cloud-controller-manager) roles. |
 | March 2025 | Roles | Added Durable Task roles. See [Durable Task Data Contributor](built-in-roles/integration.md#durable-task-data-contributor), [Durable Task Data Reader](built-in-roles/integration.md#durable-task-data-reader), and [Durable Task Worker](built-in-roles/integration.md#durable-task-worker). |

includes/role-based-access-control/limits.md

@@ -1,10 +1,10 @@
 ---
- title: include file
- description: include file
+ title: Include file
+ description: Include file
  author: rolyon
  ms.service: role-based-access-control
  ms.topic: include
- ms.date: 02/26/2025
+ ms.date: 04/24/2025
  ms.author: rolyon
  ms.custom: include file
 ---
@@ -23,3 +23,5 @@
 |  | Size of description for Azure custom roles | Recommended maximum: 512 chars |
 |  | Size of an Azure custom role definition | 1 MB |
 |  | Number of assignable scopes for Azure custom roles | 2,000 |
+| [Azure deny assignments](../../articles/role-based-access-control/deny-assignments.md) |  |  |
+|  | Number of system-managed deny assignments per Azure subscription | 2,000 |