Understanding role-based-access-control

Azure Role-Based Access Control (RBAC) is a tool that’s used to manage access to Azure resources. It provides fine-grained control over who can perform specific actions (such as creating, updating, or deleting resources) on specific resources within an Azure subscription. With Azure RBAC, you can grant permissions to users, groups, and applications, which is defined as the scope, such as a management group, subscription, resource group, or individual resource. This way, you can ensure that users have the necessary permissions to perform their tasks, while preventing them from accessing resources that they do not need.

RBAC Requirements

To use Azure RBAC, you need to have an Azure subscription and a Microsoft Entra tenant. You can then assign roles to users, groups, or applications within the Azure portal or by using Azure PowerShell or the Azure CLI. You can also assign roles to users within your organization or to users in external...