The Azure Portal allows for Role-based access control (RBAC). RBAC allows for granular access to the Azure resources.
Azure RBAC accepts the following two types of accounts:
- Azure Active Directory accounts. Using AAD, you can grant access to users or groups from the default AAD tenant of your subscription.
- Microsoft accounts. When using Microsoft accounts, you can grant access to any email that has been set up as a Microsoft account.
If your environment is fully automated, and your application is deployed by a CI/CD pipeline, you may consider limiting administrator access to the application to the bear minimum, to prevent configuration drift.
You can configure user access through PowerShell, CLI, REST API, or the ...