Azure Active Directory
- Users
- Groups
AAD RBAC
- Can be applied at
- Subscription
- Resource Group
- Resource Level
- Roles are
- Built in
- Custom
- Popular Roles are
- Global Administrator
- Owner
- Co Owner
- Contributor
- Reader
- Roles assigned are inherited from parents to children
- Roles assigned at Resource Groups are inherited to Resources
- Roles assigned at Subscription level are inherited to Resource Groups and further to Resources.
- User can add the new role assignments at Resource Group/Resource Level to change from inherited assignments
- For further Reading, Refer Here
Exercise
- Create a Group with any name
- Create two users and add them to the group
- Navigate to any Resource Group and Give the Role assignment of Reader
- Create some resources in Resource Group and check the default Role assignment for the group.
- Add a contributor Role Assignment to One Resource.
- Also test by giving Reader access at subscription level.
