Azure RBAC enables you to use detailed access management for Azure. Employing RBAC makes it possible to make specific choices about how user access is granted in order to perform their tasks (for example, SQL Administration). Two ways of control are possible when using the fine-grained RBAC:
RBAC role assignments are bound to a specific subscription or resource (group). Giving access to a specific Resource, does not imply access to any other resource in the same subscription.
The role can narrow the access even further within the scope of an assignment. These roles can be on a general level, such as owner, but also specific such as virtual machine reader.
We will take a look at RBAC roles as well as role assignment: ...
