Role-Based Access Control (RBAC) in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Role-Based Access Control (RBAC)?

RBAC is a way to manage who can do what in a cloud environment by assigning roles to users or groups. Each role has specific permissions that control access to resources.

beginner

What are the three main components of RBAC in Azure?

The three main components are: 1) Security Principal (user, group, or service principal), 2) Role Definition (set of permissions), and 3) Scope (where the role applies, like subscription or resource group).

beginner

How does RBAC help improve security in Azure?

RBAC limits access by giving users only the permissions they need to do their job. This reduces the risk of accidental or malicious changes to resources.

intermediate

What is a 'scope' in Azure RBAC?

Scope defines where the permissions apply. It can be a management group, subscription, resource group, or a single resource. Permissions granted at a higher scope apply to all lower scopes.

beginner

Name two built-in roles in Azure RBAC and their purpose.

1) Owner - full access to all resources including managing access. 2) Reader - can view resources but cannot make changes.

Which component in Azure RBAC represents the user or group that gets permissions?

A Security Principal

B Role Definition

C Scope

D Resource Provider

The Security Principal is the user, group, or service that receives permissions.

What does the 'scope' in RBAC define?

A Where the role permissions apply

B The permissions assigned to a role

C The user who gets the role

D The type of resource

Scope defines the boundary where the role permissions apply, such as subscription or resource group.

Which built-in Azure RBAC role allows viewing resources but not changing them?

A Contributor

B Owner

C Reader

D User Access Administrator

The Reader role allows viewing resources without permission to modify them.

What is the main benefit of using RBAC in Azure?

A Unlimited access to all users

B Limits access to only what users need

C Simplifies billing

D Automatically creates resources

RBAC limits access by assigning only necessary permissions to users, improving security.

If you assign a role at the subscription scope, where does it apply?

A Only to management groups

B Only to that subscription

C Only to resource groups

D To all resources within that subscription

Assigning a role at the subscription scope applies permissions to all resources within that subscription.

Explain how RBAC works in Azure and why it is important for managing cloud resources.

Think about how you control who can do what in a team project.

Describe the difference between the Owner and Reader roles in Azure RBAC.

Compare a manager versus a viewer in a workplace.