Administrative access
Part of any security conversation is configuring developer and administrator access to the application itself. In the next section, we will discuss how to configure administrative access to our Azure resources.
Role-based access control
The Azure Portal allows for Role-based access control (RBAC). RBAC allows for granular access to the Azure resources.
Azure RBAC accepts the following two types of accounts:
- Azure Active Directory accounts. Using AAD, you can grant access to users or groups from the default AAD tenant of your subscription.
- Microsoft accounts. When using Microsoft accounts, you can grant access to any email that has been set up as a Microsoft account.
Note
If your environment is fully automated, and your application is deployed by a CI/CD pipeline, you may consider limiting administrator access to the application to the bear minimum, to prevent configuration drift.
You can configure user access through PowerShell, CLI, REST API, or the Azure Portal. To configure...
