Hi and Welcome back.

Now in this chapter I just quickly want to go through the three set of let's say permissions
that you
can assign in Azure. Now we're going to go through the set of permissions a little bit
later on. But just to
kind of differentiate that there are three sets of permissions that you can assign on the
Azure
platform. So for Azure AD
So remember that Azure Active Directory is nothing but your identity provider in Azure
So here is where you can define your users, your groups. You can also have service
Identity, Service principles.
So all of these are available in Azure AD
So it's like having your active directory on the cloud. Now to manage the objects in
Active Directory
to manage the users, the groups so who can add the users who can create the groups
who can the users
you have Azure AD roles.
So these are specific roles which are available on the Azure AD platform.
Next you also have permissions that can be assigned on the subscription basis.
So in this, for example you have the Account Administrator. so the account administrator
for example can
ensure to add more subscriptions or change the billing for the subscription itself.
So these permissions are separate from these permissions.
So you have separate Azure AD roles and then you have separate permissions at the
subscription level.
Now apart from that you also have RBAC that is nothing but Role based access control
that is used to
give that fine grain level of access to your resources and resource groups in Azure
So don't get confused over these three access permissions.
Right.
So Role based access control doesn't give you access over Azure AD
Similarly if you assign a person to an Azure AD role, it doesn't
mean that you give them access to the resources on the Azure platform.
So kind of understand that there are three levels of access and all of them are different.
Right.
So this was just to give you an introduction to these different roles.
We will be going over them in much more detail in the subsequent chapters.