High-scope assignments: the risk
Inheritance can expand impact far beyond what you intended. Policies and roles can affect all descendants. Mistakes spread fast at top scopes. Prefer least privilege for Azure RBAC assignments. Widen scope only when necessary.