Azure Classroom Series – 22/Nov/2020

Role Based Access Control (RBAC)

• Azure RBAC is an authorization system built on Azure Resource Manager to provide access management of Azure Resources
• Security Prinicpal:
  • This is an object that represent user, group, service priniciple or managed identity requests access ti azure resources
• Role definition:
  • This is collection of permissions.
  • A role definition lists
    • the operations that can be performed (read, write, delete)
  • Azure includes several built-in roles Refer Here
• Scope:
  • This is where you can apply the access(Role) to. The options are
    • Management Group
    • Subscription
    • Resource Group
    • Resource
• Role assignments:
  • A role assignment is attaching a role definition to a user, group, service principal or managed identity

Creating a Custom Role

• Custom Role will have the following items Refer Here
• Also azure resource manager provider options are require Refer Here
• Refer Here for custom Role json

Azure Policy

• Azure Policy helps in enforcing Standards & to access compliance at scale.