Hands-On Azure for Developers

RBAC

In Azure Service Bus, there is also a possibility to leverage roles defined in Azure AD to grant access to a service. The whole feature relies on the assumption that a user will be able to take responsibility for granting access to a Service Bus instance. The first step is exactly the same as with MSI authentication: you have to add a user to a service, so it gains access and can start pushing and receiving messages. The full instructions can be found in the Further reading section.

Note that with the ability to tell explicitly how a user or an application can access Azure Service Bus, you are given much better control over how messages are published and received. This a great improvement over Azure Storage Queues, where such features ...