A municipal architect notes that Azure RBAC is often confused with Entra app single sign-on. What does Azure RBAC primarily authorize?
Select an answer to reveal the explanation.
Short Explanation
SSO gets you through the front door of apps; RBAC decides what you can do to Azure resources once you are operating in Azure. Think "can this group restart that VM" versus "can they sign into Outlook." Different jobs.
Full Explanation
Azure RBAC authorizes what principals can do to Azure resources—create, read, update, delete, and related management actions—at a defined scope. Entra SSO focuses on authenticating into applications conveniently. Fundamentals questions often test that RBAC is resource authorization, not merely app sign-in convenience.