Access policies vs RBAC in Azure - Quick Revision & Key Differences

Recall & Review

beginner

What is an Access Policy in Azure?

An Access Policy in Azure defines specific permissions for a resource, like a key vault, controlling who can perform certain actions such as read or write.

beginner

What does RBAC stand for and what is its purpose?

RBAC stands for Role-Based Access Control. It assigns roles to users or groups to control access to Azure resources based on their job functions.

intermediate

How does RBAC differ from Access Policies in Azure?

RBAC controls access at the Azure resource level using roles, while Access Policies are specific to certain services like Key Vault and control permissions at a finer level.

intermediate

Can RBAC and Access Policies be used together in Azure?

Yes, RBAC manages who can access the resource itself, and Access Policies manage what actions they can perform inside that resource, like keys or secrets in a Key Vault.

beginner

Give a real-life example to explain RBAC vs Access Policies.

Think of RBAC as giving someone a key to a building (resource access). Access Policies are like rules inside the building that say which rooms they can enter or what they can do there.

What does RBAC control in Azure?

A Who can access Azure resources based on roles

B Specific permissions inside a Key Vault

C Network traffic rules

D Billing and subscription settings

RBAC controls access to Azure resources by assigning roles to users or groups.

Access Policies in Azure are mainly used with which service?

A Azure Virtual Machines

B Azure Key Vault

C Azure Storage Accounts

D Azure Active Directory

Access Policies are commonly used to control permissions inside Azure Key Vault.

Which statement is true about RBAC and Access Policies?

A They are the same and interchangeable

B Access Policies control resource access; RBAC controls actions inside the resource

C RBAC controls resource access; Access Policies control actions inside the resource

D Both control network access

RBAC manages who can access resources; Access Policies manage what actions can be done inside certain resources.

Can a user have access to a resource via RBAC but be blocked by Access Policies?

A Yes, but only for network resources

B No, RBAC overrides Access Policies

C No, Access Policies override RBAC

D Yes, RBAC grants access but Access Policies can restrict specific actions

A user may have resource access through RBAC but be limited by Access Policies on what they can do inside.

Which is a benefit of using RBAC over Access Policies?

A RBAC provides broad role assignments across many resources

B RBAC controls secret permissions inside Key Vault

C RBAC manages encryption keys directly

D RBAC is only for billing management

RBAC allows assigning roles that apply across many Azure resources, making access management easier.

Explain the difference between Access Policies and RBAC in Azure.

Think about who can enter a building versus what they can do inside.

Describe a scenario where you would use both RBAC and Access Policies together.

Consider controlling building entry and room access separately.