Secure Azure Resources with RBAC

Learning objectives: describe RBAC & scopes, compare built-in roles, assign roles (to users/groups/service principals), and understand custom roles.

Overview

The authorization module: who can do what, where. The three-part rbac model (security principal + role + scope) and how to assign it.

Key terms

  • Security principal · Owner/Contributor/Reader · scope · inheritance

Hands-on

Assign Reader to a group at resource-group scope; confirm Contributor on a test group; inspect inherited permissions.

Exam focus

Scope hierarchy + inheritance; Owner vs Contributor; assign to groups.

Path MOC · understand-microsoft-entra-id · manage-authentication-sspr-mfa