Azure RBAC Scope Inheritance

Role-Based Access Control (RBAC) serves as the core system for managing user permissions in Azure. Azure provides built-in role definitions such as Owner, Contributor, and Reader, which specify what actions an identity can take. These roles are applied at distinct levels of the resource hierarchy, which are known as scopes. Scope inheritance flows downward, meaning a role assigned at the subscription level automatically applies to all nested resource groups and individual resources.