Azure App Configuration - Making Centralized Configuration Easy

You sold it to me, Jimmy. Amazing service. App Configuration is what I was looking for long time

Also, request-based refresh... That means if I were to host a net core app on-prem, with no public inbound connectivity, refreshes won't work, will they? Only the initial loading if the settings will work. Right?

When demonstrating RBAC in the IAM section the app service had contributor-level access. Which is to widely scoped I guess. Is something like read-only available?