When you create a container instance, you can specify the security context settings for each container. You can set the User ID, Group ID, to run as non-root user, and to enable read-only root filesystem.

For more information, see Creating a Container Instance.