Interpreting access assignments

There are a few tips we can provide when interpreting access assignments. First off, you need to understand the scope of the assignment – that is, is it at the management group, subscription group, resource group, or resource level?

Next, you can have a look at the role rules; in order to do this, you need to do the following:

1. Navigate to the Azure portal by opening a web browser and browsing to https://portal.azure.com.
2. Select Resource groups on the left, which will show all the current resource groups, and select a resource group in your subscription (in my case, it will be Az-104).
3. Under Access control (IAM), choose Role assignments and select a role you want to have a look at in detail:

Figure 2.22 – The Role assignments section under the Access control (IAM) blade for a resource group

4. In my case, I'm going to select the Contributor role:

Figure 2.23...