Azure's authorization system for managing who has access to which resources and what they can do with them. Roles (Owner, Contributor, Reader) are assigned to users, groups, or service identities.
A central topic in AZ-104, also appearing in AZ-900 as a security mechanism. Main roles: Owner (everything), Contributor (create/manage, cannot assign permissions), Reader (read-only). It inherits from higher to lower scope: Management Group > Subscription > Resource Group > Resource.
Azure RBAC (Role-Based Access Control) is a concept that can show up on the exam. Check the full guide to see it in context.