Azure Role-Based Access Control (RBAC): who can do what, where
Slide 5 / 12
Scope hierarchy and inheritance
A role at a higher scope applies to everything below it. Management group → Subscription → Resource group → Resource. Higher scope equals broader impact. Inheritance flows downward. Use the smallest scope that works.
