• Create custom role-based access control (RBAC) and Azure AD roles
  • Provide access to Azure resources by assigning roles at different scopes
  • Interpret access assignments