Skip to content

Commit 6c8ac89

Browse files
authored
Add video summary for Azure RBAC concepts
Added a video summary to enhance understanding of Azure RBAC concepts.
1 parent 0d9fa5d commit 6c8ac89

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

learn-pr/wwl-azure/manage-secure-ai-ready-infrastructure/includes/2-configure-azure-rbac-infrastructure-components.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
This video summarizes the key concepts on the page.
2+
3+
> [!VIDEO https://learn-video.azurefd.net/vod/player?id=e3ba4d38-da59-4b80-9595-9ef2421ffae4]
4+
15
When Contoso's development team first deployed their AI agents, they granted every service account Contributor permissions at the subscription level. This approach delivered fast deployment velocity during the prototype phase, but it also gave agents the ability to delete production databases, modify network security rules, and access resources across unrelated projects. Security audits revealed that over-privileged access increased the blast radius of potential breaches by 300%, turning what should have been isolated incidents into organization-wide security events.
26

37
Azure Role-Based Access Control (RBAC) solves this problem by letting you assign permissions at precisely the scope required for each job task. With RBAC, you define who can access which resources and what actions they can perform, enforcing the principle of least privilege across your entire infrastructure. The system uses a hierarchy of scopes—subscription, resource group, and individual resource—where permissions assigned at a higher level automatically inherit to child resources. For example, granting Reader access at the resource group level means that identity can view all resources within that group without requiring separate assignments for each database, storage account, or virtual machine.

0 commit comments

Comments
 (0)