Secure Azure Resources with RBAC
Learning objectives: describe RBAC & scopes, compare built-in roles, assign roles (to users/groups/service principals), and understand custom roles.
Overview
The authorization module: who can do what, where. The three-part rbac model (security principal + role + scope) and how to assign it.
Concepts introduced (link to term notes)
Key terms
- Security principal · Owner/Contributor/Reader · scope · inheritance
Hands-on
Assign Reader to a group at resource-group scope; confirm Contributor on a test group; inspect inherited permissions.
Exam focus
Scope hierarchy + inheritance; Owner vs Contributor; assign to groups.
Related
Path MOC · understand-microsoft-entra-id · manage-authentication-sspr-mfa