> For the complete documentation index, see [llms.txt](https://docs.arkannis.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.arkannis.net/cloud/azure/courses/az900-course/azure-governance-features/authentification-and-rbac.md).

# Authentification and RBAC

## Role-Based access control (RBAC)

* Microsoft's preferred solution for access control
* Create roles that represent the common tasks of the job:
  * Accountant
  * Developer
  * Business Lead
* Assign granular permissions to that role
* Assign users to that role:
  * Do not assign granular permissions to an individual
* Permissions:
  * Reader - Can see but cannot modify
  * Contributor - Pretty much full access
  * Owner - Like contributor but also allowed to grant access