Interpreting Access Assignments

There are a few tips when interpreting access assignments. First off, you need to understand the scope of the assignment – that is, is it at the management group, subscription group, resource group, or resource level?

Next, you can have a look at the role rules. In order to do this, you need to do the following:

1. Navigate to the Azure portal by opening a web browser and browsing to https://portal.azure.com.
2. Select Resource groups from the left menu after clicking the hamburger button. This will show all the current resource groups. Select a resource group in your subscription (in this case, it will be AZ-104).
3. Under Access control (IAM), choose Role assignments and select a role you want to have a look at in detail. Notice the IT support – Restart VMs only assignment you did in the previous exercise.

Figure 3.37: The role assignments section on the Access control (IAM) blade

4. For this...