Manage access control

• Configure Azure role permissions for management groups, subscriptions, resource groups, and

resources

• Interpret role and resource permissions
• Assign built-in Azure AD roles
• Create and assign custom roles, including Azure roles and Azure AD roles