From the course: Microsoft Azure Fundamentals (AZ-900) Cert Prep: 2 Azure Architecture and Security

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Understand role-based access control

Understand role-based access control

- [Instructor] So far, we've covered authentication in Azure. What follows after a successful authentication is authorization. Azure role-based access control, abbreviated as RBAC, provides smart authorization for Azure resources. It defines permissions for users based on their role in the organization. I call it smart authorization because it provides a very granular and fine-grained access control mechanism. Not only can you assign permissions for users at the topmost level in the hierarchy, you can also drill down to the smallest resource and precisely define what users can and cannot do to resources. There are three parts that make this work. First is a security principle. This can be a user account, a group, or any identity to which you want to grant permissions. Second is a rule definition. This part defines the role and the actions an identity is authorized to perform. To simplify it, the role can be an owner, contributor or a reader. And the actions can be a combination of…

Contents