Part of [[202404051739 Governance Overview|azure governance]]

Role based access control / giving something permissions at a certain scope when needed

1. Applies to all items in control plane ([[202404051803 Management groups|management groups]],[[202404051818 Resource Groups|resource groups]], [[202404061212 Azure Resources|resources]])
2. can apply to some storage roles in data plane
3. Inherited

License

free to use

Limits

• 4000 per [[202401101441 Azure subscriptions|subscription]]
• 500 per [[202404051803 Management groups|management group]]
• 5000 per tenant for [[202401072038 Azure RBAC custom roles|custom roles]]

[[202404061316 Azure Roles]] [[202401072038 Azure RBAC custom roles]]

---

references:

RBAC overview RBAC Limits