What access rights do I get by default?
By default you get a ‘Reader’ role, which enables you to see your subscription, including its resources deployed in Azure. You cannot make direct changes to the infrastructure. For more information see here.
In case you need access to certain resource groups or resources, it is possible to attain more rights through built-in or custom roles. For that please reach out to the Azure engineers, so we can determine which role is best suited for your objective. Here you can find an overview of available built-in roles.