Diagram
A top-down hierarchy showing the four Azure RBAC scope levels: Management Group, Subscription, Resource Group, and Resource. Permissions assigned at a parent scope automatically inherit down to all child scopes.
Scope Levels and Inheritance
Scope defines the set of resources a role assignment affects. The four levels are Management Group, Subscription, Resource Group, and Resource. Permissions assigned at a parent scope, like a subscription, automatically flow down to all its child scopes. To enforce least privilege, avoid using broad roles at high scopes; instead, use specific job function roles at the narrowest scope possible for the user's task.
Domain 1 of 3
33 practice questions
Practice this DomainLast updated