In Azure Container Registry, you can control who can access specific repositories using scoped permissions. This means you can give different users or applications permission to do certain actions, like pulling or pushing images, only for specific repositories instead of giving them access to everything. To set this up, you can create scope maps that define what actions are allowed for each user or application. By using these scoped permissions, you improve security and ensure that only the right people can access your important container images.
Reference
https://learn.microsoft.com/en-us/azure/container-registry/container-registry-repository-scoped-permissions