Identity and Access Management (IAM)

This section will look at aspects of implementing, managing, and controlling IAM; you will cover role-based access control, Azure subscription access control, Azure roles, and external identity access.

Role-Based Access Control (RBAC)

RBAC is a concept that refers to authorized user access based on defined roles that have been assigned. It allows you to create “granular access control” to Azure resources through “defined roles” and “custom roles.” You can segregate duties by granting only the access required to perform the required tasks.

It is an effective practice for governance “only to allow the minimum access” required to complete a task. This is the basis for the principle of least privilege and should always be adopted. So, users are only given access through a role(s) that is the most appropriate for the tasks they need to carry out.

This least privilege approach enhances...