A new hire confuses Azure Policy with Azure role-based access control. Which contrast is accurate for AZ-900?
Select an answer to reveal the explanation.
Short Explanation
RBAC is the badge reader—who is allowed to do what. Policy is the building code—what a resource is allowed to look like. Both matter for city Azure estates, but they are not the same lever.
Full Explanation
Azure Policy evaluates and enforces standards on resource properties and configurations. Azure RBAC authorizes identities to perform management actions on scopes such as subscriptions or resource groups. Fundamentals candidates must separate “what is allowed to be deployed or configured” (Policy) from “who may act” (RBAC).