thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

Azure Role-Based Access Control (Azure RBAC)

Authorization system for Azure resources that assigns role definitions to security principals at a scope.

Definition

Azure RBAC role assignments combine a security principal, a role definition and a scope (management group, subscription, resource group or resource), and inherit downward. Built-in roles include Owner, Contributor, Reader and User Access Administrator; custom roles are possible. Azure RBAC is separate from Microsoft Entra roles such as Global Administrator, which govern the directory.

Example

A developer is assigned Contributor on rg-dev, allowing resource changes there but not role assignments.

Exam tip

Contributor can manage resources but cannot grant access; Owner and User Access Administrator can assign roles.

Related terms