83.7k views
3 votes
How does Azure Policy differ from RBAC?

User Radu Varga
by
7.8k points

1 Answer

5 votes

Final answer:

Azure Policy is used for enforcing rules on resource properties, ensuring compliance with organizational standards, while RBAC is used for providing access control to users over Azure resources based on their roles.

Step-by-step explanation:

The question revolves around how Azure Policy differs from RBAC (Role-Based Access Control). Understanding the difference between these two can be vital for managing and securing resources in Azure.

Azure Policy is a service in Azure that enables you to create, assign, and manage policies that enforce different rules over your resources, ensuring compliance with your company's standards and service level agreements. These policies can enforce rules such as which types of resources can be provisioned, specific configurations that must be enforced, and so on.

On the other hand, RBAC is about controlling who has access to Azure resources, what they can do with those resources, and which areas they have access to. RBAC focuses on managing user actions at different scopes, such as the subscription, resource group, or resource level, by assigning roles that outline the permissions granted to users or groups.

Key Differences:

  • Azure Policy enforces rules on resource properties during deployment and for already existing resources.
  • RBAC controls access to resources, allowing users to perform certain actions based on their assigned roles.
User Myke
by
8.4k points