Skip to content

Commit 0ec6710

Browse files
Merge pull request #51285 from staleycyn/patch-6
Update 8-design-for-role-based-access-control.md
2 parents 99c0e1c + 1cbd0c4 commit 0ec6710

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

learn-pr/wwl-azure/design-governance/includes/8-design-for-role-based-access-control.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[Azure RBAC](/azure/role-based-access-control/overview) allows you to grant access to Azure resources that you control. Azure RBAC evaluates each request for access and determines if access should be blocked, not allowed, or allowed.
22

3-
:::image type="content" source="../media/role-based-access-control-flowchart.png" alt-text="Diagram of an RBAC decision tree that shows the flow from no access to access allowed." border="false":::
3+
> [!VIDEO https://learn-video.azurefd.net/vod/player?id=1c0458bb-8548-4e8d-8443-f1edc02e5adf]
44
55
RBAC is an allow model. An _allow model_ means when a user is assigned a specific role, Azure RBAC allows the user to perform the actions associated with that role. A role assignment could grant a user read permissions to a resource group. To have write permissions, the role would need to explicitly allow write access.
66

0 commit comments

Comments
 (0)