{"items":[{"href":"./","toc_title":"Azure RBAC documentation"},{"children":[{"href":"overview","toc_title":"What is Azure RBAC?"},{"href":"conditions-overview","toc_title":"What is Azure ABAC?"},{"href":"rbac-and-directory-admin-roles","toc_title":"Understand the different roles"},{"href":"whats-new","toc_title":"What\u0027s new in docs"}],"toc_title":"Overview"},{"children":[{"href":"check-access","toc_title":"Check access for a user"},{"displayName":"ARM, Resource Manager, Template","href":"quickstart-role-assignments-bicep","toc_title":"Bicep"},{"displayName":"Resource Manager","href":"quickstart-role-assignments-template","toc_title":"ARM template"}],"toc_title":"Quickstarts"},{"children":[{"href":"quickstart-assign-role-user-portal","toc_title":"Grant a user access - Portal"},{"href":"tutorial-role-assignments-user-powershell","toc_title":"Grant a user access - PowerShell"},{"href":"tutorial-role-assignments-group-powershell","toc_title":"Grant a group access - PowerShell"},{"href":"tutorial-custom-role-powershell","toc_title":"Create a custom role - PowerShell"},{"href":"tutorial-custom-role-cli","toc_title":"Create a custom role - CLI"}],"toc_title":"Tutorials"},{"children":[{"href":"role-definitions","toc_title":"Role definitions"},{"href":"role-assignments","toc_title":"Role assignments"},{"href":"scope-overview","toc_title":"Scope"},{"href":"best-practices","toc_title":"Best practices"},{"children":[{"href":"delegate-role-assignments-overview","toc_title":"Delegate role assignment management overview"},{"href":"conditions-authorization-actions-attributes","toc_title":"Authorization actions and attributes"},{"href":"delegate-role-assignments-examples","toc_title":"Example conditions"}],"toc_title":"Delegate"},{"children":[{"href":"conditions-format","toc_title":"Condition format"},{"href":"conditions-prerequisites","toc_title":"Conditions prerequisites"},{"href":"conditions-faq","toc_title":"Conditions FAQ"},{"href":"conditions-custom-security-attributes-example","toc_title":"Custom security attributes example"}],"toc_title":"ABAC conditions"},{"children":[{"displayName":"regulatory, compliance, standards, domains","href":"security-controls-policy","toc_title":"Security controls by Azure Policy"}],"toc_title":"Security"}],"toc_title":"Concepts"},{"children":[{"href":"/azure/role-based-access-control/role-definitions-list","toc_title":"List role definitions"},{"children":[{"href":"/azure/role-based-access-control/role-assignments-list-portal","toc_title":"Portal"},{"href":"/azure/role-based-access-control/role-assignments-list-powershell","toc_title":"PowerShell"},{"href":"/azure/role-based-access-control/role-assignments-list-cli","toc_title":"CLI"},{"href":"role-assignments-list-rest","toc_title":"REST API"}],"toc_title":"List role assignments"},{"children":[{"href":"role-assignments-steps","toc_title":"Steps to assign a role"},{"children":[{"href":"/azure/role-based-access-control/role-assignments-portal","toc_title":"Assign roles"},{"href":"/azure/role-based-access-control/role-assignments-portal-managed-identity","toc_title":"Managed identity"},{"href":"role-assignments-external-users","toc_title":"External users"}],"toc_title":"Portal"},{"href":"role-assignments-powershell","toc_title":"PowerShell"},{"href":"role-assignments-cli","toc_title":"CLI"},{"href":"role-assignments-rest","toc_title":"REST API"},{"displayName":"Resource Manager","href":"role-assignments-template","toc_title":"ARM template"}],"toc_title":"Assign roles"},{"children":[{"href":"pim-integration","toc_title":"Eligible and time-bound"},{"href":"role-assignments-eligible-activate","toc_title":"Activate eligible roles"}],"toc_title":"Eligible and time-bound"},{"children":[{"href":"/azure/role-based-access-control/role-assignments-portal-subscription-admin","toc_title":"Subscription administrator with conditions"},{"href":"delegate-role-assignments-portal","toc_title":"Delegate role assignment management with conditions"}],"toc_title":"Delegate"},{"children":[{"href":"conditions-role-assignments-portal","toc_title":"Portal"},{"href":"conditions-role-assignments-powershell","toc_title":"PowerShell"},{"href":"conditions-role-assignments-cli","toc_title":"CLI"},{"href":"conditions-role-assignments-rest","toc_title":"REST API"},{"href":"conditions-role-assignments-template","toc_title":"ARM template"},{"href":"../storage/blobs/storage-auth-abac-examples?toc=/azure/role-based-access-control/toc.json","toc_title":"Example conditions for Blob Storage"},{"href":"https://go.microsoft.com/fwlink/?linkid=2324519","toc_title":"ABAC for Log Analytics"},{"href":"https://go.microsoft.com/fwlink/?linkid=2324520","toc_title":"ABAC for Container Registry"},{"href":"conditions-custom-security-attributes","toc_title":"Conditions and custom security attributes"}],"toc_title":"Add or edit ABAC conditions"},{"href":"/azure/role-based-access-control/role-assignments-remove","toc_title":"Remove role assignments"},{"href":"deny-assignments","toc_title":"List deny assignments"},{"children":[{"href":"custom-roles","toc_title":"Overview"},{"href":"custom-roles-portal","toc_title":"Portal"},{"href":"custom-roles-powershell","toc_title":"PowerShell"},{"href":"custom-roles-cli","toc_title":"CLI"},{"href":"custom-roles-rest","toc_title":"REST API"},{"displayName":"ARM, Resource Manager, Template","href":"custom-roles-bicep","toc_title":"Bicep"},{"displayName":"Resource Manager","href":"custom-roles-template","toc_title":"ARM template"}],"toc_title":"Create custom roles"},{"href":"change-history-report","toc_title":"View activity logs"},{"href":"role-assignments-alert","toc_title":"Alert on privileged role assignments"},{"href":"elevate-access-global-admin","toc_title":"Elevate access"},{"href":"classic-administrators","toc_title":"Classic administrators"},{"href":"transfer-subscription","toc_title":"Transfer subscription to different directory"},{"children":[{"href":"troubleshooting","toc_title":"Troubleshoot Azure RBAC"},{"href":"troubleshoot-limits","toc_title":"Troubleshoot Azure RBAC limits"},{"href":"conditions-troubleshoot","toc_title":"Troubleshoot ABAC conditions"}],"toc_title":"Troubleshoot"}],"toc_title":"How-to guides"},{"children":[{"children":[{"href":"built-in-roles","toc_title":"Built-in roles"},{"href":"built-in-roles/privileged","toc_title":"Privileged"},{"href":"built-in-roles/general","toc_title":"General"},{"href":"built-in-roles/compute","toc_title":"Compute"},{"href":"built-in-roles/networking","toc_title":"Networking"},{"href":"built-in-roles/storage","toc_title":"Storage"},{"href":"built-in-roles/web-and-mobile","toc_title":"Web and Mobile"},{"href":"built-in-roles/containers","toc_title":"Containers"},{"href":"built-in-roles/databases","toc_title":"Databases"},{"href":"built-in-roles/analytics","toc_title":"Analytics"},{"href":"built-in-roles/ai-machine-learning","toc_title":"AI \u002B machine learning"},{"href":"built-in-roles/internet-of-things","toc_title":"Internet of Things"},{"href":"built-in-roles/integration","toc_title":"Integration"},{"href":"built-in-roles/identity","toc_title":"Identity"},{"href":"built-in-roles/security","toc_title":"Security"},{"href":"built-in-roles/devops","toc_title":"DevOps"},{"href":"built-in-roles/migration","toc_title":"Migration"},{"href":"built-in-roles/monitor","toc_title":"Monitor"},{"href":"built-in-roles/management-and-governance","toc_title":"Management and governance"},{"href":"built-in-roles/hybrid-multicloud","toc_title":"Hybrid \u002B multicloud"}],"toc_title":"Built-in roles"},{"children":[{"href":"resource-provider-operations","toc_title":"Permissions"},{"href":"permissions/general","toc_title":"General"},{"href":"permissions/compute","toc_title":"Compute"},{"href":"permissions/networking","toc_title":"Networking"},{"href":"permissions/storage","toc_title":"Storage"},{"href":"permissions/web-and-mobile","toc_title":"Web and Mobile"},{"href":"permissions/containers","toc_title":"Containers"},{"href":"permissions/databases","toc_title":"Databases"},{"href":"permissions/analytics","toc_title":"Analytics"},{"href":"permissions/ai-machine-learning","toc_title":"AI \u002B machine learning"},{"href":"permissions/internet-of-things","toc_title":"Internet of Things"},{"href":"permissions/integration","toc_title":"Integration"},{"href":"permissions/identity","toc_title":"Identity"},{"href":"permissions/security","toc_title":"Security"},{"href":"permissions/devops","toc_title":"DevOps"},{"href":"permissions/migration","toc_title":"Migration"},{"href":"permissions/monitor","toc_title":"Monitor"},{"href":"permissions/management-and-governance","toc_title":"Management and governance"},{"href":"permissions/hybrid-multicloud","toc_title":"Hybrid \u002B multicloud"}],"toc_title":"Permissions"},{"href":"../azure-resource-manager/management/azure-subscription-service-limits#azure-rbac-limits","toc_title":"Azure RBAC limits"},{"href":"/powershell/module/az.resources","toc_title":"Azure PowerShell"},{"href":"/cli/azure/role","toc_title":"CLI"},{"href":"/rest/api/authorization/","toc_title":"REST API"},{"children":[{"href":"/azure/templates/microsoft.authorization/roleassignments","toc_title":"Role Assignments"},{"href":"/azure/templates/microsoft.authorization/roledefinitions","toc_title":"Role Definitions"}],"displayName":"Resource Manager","toc_title":"ARM templates"},{"displayName":"samples, policies, definitions","href":"policy-reference","toc_title":"Azure Policy built-ins"}],"toc_title":"Reference"},{"children":[{"href":"/training/browse/?products=azure-active-directory","toc_title":"Build your skills with Microsoft Learn training"}],"toc_title":"Resources"}],"metadata":{"adobe-target":true,"brand":"azure","breadcrumb_path":"/azure/bread/toc.json","count_of_node_with_href":115,"feedback_github_repo":"MicrosoftDocs/azure-docs","feedback_help_link_type":"get-help-at-qna","feedback_help_link_url":"https://learn.microsoft.com/answers/tags/189/azure-rbac/","feedback_product_url":"https://feedback.azure.com/d365community/forum/79b1327d-d925-ec11-b6e6-000d3a4f06a4","feedback_system":"Standard","ms.suite":"office","open_to_public_contributors":true,"pdf_absolute_path":"/azure/opbuildpdf/role-based-access-control/toc.pdf","permissioned-type":"public","recommendation_types":["Training","Certification"],"recommendations":true,"searchScope":["Azure"],"uhfHeaderId":"azure","zone_pivot_group_filename":"zone-pivot-groups.json"}}