From the course: Azure for Architects: Security and Identity Management with Microsoft Entra
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Developing identity solutions with RBACs
From the course: Azure for Architects: Security and Identity Management with Microsoft Entra
Developing identity solutions with RBACs
- [Instructor] We're going to now take a look at, well, how do you administrate your identities and what are some of the best practices to do that? You do that with role-based access control. So let's define role-based access control. It's essentially a collection of permissions. It lists the actions that can be performed, like read, write, list, and delete. And it describes how those permissions are enforced. You define a role to explain what the permissions are for. So the actual name of the role is going to be somewhat self descriptive. So by inspection you can tell, okay, well, this role is for this or that. A role-based access control consists of three things, a security principle, a role definition, and a scope. So the security principle, that's any entity. You can assign these to a user, assign them to a group, a service principle for applications, or a managed identity. The scope is going to be, okay, well, they can do all those things. What can they do them to? So this is a…