Introduction to Azure RBAC

Azure RBAC stands for Azure role-based access control. This feature allows you to apply access management to your Azure management groups/subscriptions. It enables you to configure granular control with access to Azure resources and specify which user/admin actions can be taken with the resources you have granted access to.

Here are some examples of the access control conditions you can set in Azure RBAC:

• Allow one user to manage virtual machines (VMs) in a specific subscription and another user to only manage networks. This is an example of separating the network controls from the VM controls.
• Provide access to a specific user so that they can only manage all of the resources within a specific resource group.
• Grant access to an application so that it can access specific resources or a resource group.

Now, let’s take a look at the components of an RBAC item:

• Security principal
• Role definition
• Scope

Let...