Microsoft’s preferred solution for access control. Creates different roles that represent common tasks for a job. Then assigns granular permissions to each role. Finally assigns individual users to each role.
Top Level Roles
Azure provides locks to protect certain resources bu putting on locks, which turn the resources read only. Useful for protecting production resources and resource groups from being deleted.
Useful for providing metadata for resources for easier identification and grouping.