Articles → MICROSOFT AZURE → Azure AD Roles And RBAC In Azure

Azure AD Roles And RBAC In Azure

In this article, we will explain the difference between the Azure AD roles and RBAC in Azure.

Azure AD Roles

Azure AD roles are used for user authentication, user creation, group creation, license management, etc.

Examples of some default Azure AD roles are: -

Application Administrator
Group administrator
Network administrator
Billing Manager

and so on…

Azure AD roles are assigned either at the group level or the user level.

RBAC

RBAC is used for resource authorization. Examples of RBAC are: -

Owner
Contributor
Reader
User Access Administrator

RBAC is assigned at the subscription level, the Resource Group Level, or the Resource Level.

Scope And Inheritance

The scope is where the access is applied. A scope is done at

Management Group level
Subscription level
Resource group level
Resource level

The permissions applied on the parent scope are inherited by the child scope. For example, if the permission is applied at the resource group level, then it will also be applied at the resource level.

Posted By -	Karan Gupta

Posted On -	Thursday, November 11, 2021

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**