As you saw in the previous section, each deployment of an Azure managed application generates a managed resource group for its resources which are managed and maintained by the author.
This resource group is shown in the managed application resource itself under Managed resource group as shown in the following screenshot:
Link to managed resource group after deployment of a managed application
If you open the resource group, you will see that this group contains all resources the managed application is made of:
Resources in the managed resource group
The user who deployed the managed resource will either have no access or read only access to this group, as defined in the managed application definition.