Azure RBAC Notes
Azure Roles and Azure AD Roles Azure roles are separate from the administrative roles found in Azure AD. For example, a user who is granted Global Administrator rights in Azure AD does not have permissions to create resources in Azure. They must be granted rights at a scope using a role with the ability to create resources such as the Contributor role. Creating Custom Roles Custom roles cannot be created through the Azure Portal, but they can be assigned after…