Azure Role-Based Access Control (RBAC): who can do what, where

AuthN vs AuthZ

Authentication (AuthN) proves identity; authorization (AuthZ) grants permissions. Authentication (AuthN): 'Who are you?'. Authorization (AuthZ): 'What can you do?'. Microsoft Entra ID: where identities live. Azure RBAC: permissions to Azure resources.