Manage access control

Configure Azure role permissions for management groups, subscriptions, resource groups, and resources

Interpret role and resource permissions

Assign built-in Azure AD roles

Create and assign custom roles, including Azure roles and Azure AD roles