From the course: Microsoft Azure Administrator Associate (AZ-104) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Understanding Azure roles

Understanding Azure roles - Azure Tutorial

From the course: Microsoft Azure Administrator Associate (AZ-104) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Understanding Azure roles

“

- [Instructor] Hi there. In this lecture, we're going to have a look at what Azure and Azure AD, now known as Entra ID, roles are. So Azure roles, or more specifically Azure identity and access management roles, are resource-centric permissions that offer granular control over who can manage specific Azure resources. These roles can be either built-in or custom precise management of access rights. Unlike Active Directory, or Entra ID, roles, which primarily manage use access and roles within an organization's directory, Azure IAM roles are specifically designed to control access to Azure resources. Roles can be assigned to individual resources in Azure, such as an individual storage count, or they can be assigned to resource groups, subscriptions, or management groups, which are at the top of a hierarchical structure. As you assign roles higher up the hierarchy, these rules flow down to the lower objects. So if you grant a read role to a resource group, the user will be able to read…

Contents