Which permission model should be chosen for a new vault to align with Azure-wide role management?
- A Vault access policies
- B Azure RBAC (correct answer)
- C Shared access signatures
- D Classic administrators
Shortcut: Azure RBAC is the recommended model. It provides granular built-in roles, inheritance from management group down, PIM support, and unified auditing with the rest of Azure.