Policy vs RBACRBAC controls permissions; Azure Policy controls resource rules. Azure Policy: what is allowed/required. Role-Based Access Control (RBAC): who can do what. RBAC can allow an action, Policy can still block/flag it. Use both together.