What is an Azure custom RBAC role?
- A A built-in role with modified name
- B A role with a custom set of allowed/notAllowed Azure resource provider actions, assignable at specified scopes (correct answer)
- C A service principal with custom claims
- D A Managed Identity with custom tags
Shortcut: Storage/storageAccounts/read) and notActions (excluded actions) to implement least-privilege beyond built-in roles.
Custom roles define specific combinations of Azure resource provider actions (e.g., Microsoft.Storage/storageAccounts/read) and notActions (excluded actions) to implement least-privilege beyond built-in roles.