Identity and access
CoreAzure built-in roles
Current Azure role capabilities, including Owner, Contributor, and User Access Administrator.
Key points
- Built-in definitions package common management or data actions.
- Owner manages resources and access; Contributor manages resources but not role assignments.
- User Access Administrator manages Azure resource access without general resource-management authority.
Best-known use cases
- Delegate resource administration with standard definitions.
- Add role-assignment authority without broad resource configuration.
What candidates often confuse it with
- Owner vs Contributor: resource plus access administration vs resource administration only.
- Contributor vs User Access Administrator: configure resources vs manage who can access them.
Key takeaway
Select a built-in role by its decisive allowed action, not by how broad its title sounds.
Related services
- Azure RBAC
Relevant exam tasks
- D1.2.S1 — Manage built-in Azure roles
- D1.2.S2 — Assign roles at different scopes
- D1.2.S3 — Interpret access assignments