Role-Based Access Control
RBACAccess control method that assigns permissions to roles rather than individual users.
What is Role-Based Access Control?
RBAC simplifies access management by grouping permissions into roles that align with job functions. Users are assigned to roles, and roles determine what they can access. This is more manageable than user-level permissions and provides clearer audit trails. When someone changes jobs, you change their role assignment rather than dozens of individual permissions.
In Microsoft 365
Azure AD provides built-in administrative roles (Global Administrator, User Administrator, etc.) and supports custom roles for granular permissions. Azure RBAC extends this to Azure resource management. Microsoft 365 workloads have their own role systems (Exchange admin roles, SharePoint admin roles).
Examples
- 1Assigning Helpdesk Administrator role for password reset capabilities
- 2Custom role for Teams channel management
- 3Azure Owner role for subscription management
Related TrueConfig Controls
These controls help implement and verify role-based access control in your Microsoft 365 environment.