← cd ~/compare
// compare · azure roles
Role Based Access Control Administrator vs User Access Administrator
Two Azure built-in roles that are often confused, compared permission by permission.
In short: Role Based Access Control Administrator has 4 actions. User Access Administrator has 3 actions. Assign the one with less access that still covers the job.
| Detail | Role Based Access Control Administrator | User Access Administrator |
|---|---|---|
| What Microsoft says | Manage access to Azure resources by assigning roles using Azure RBAC. This role does not allow you to manage access using other ways, such as Azure Policy. | Lets you manage user access to Azure resources. |
| Size | 4 actions | 3 actions |
Permissions only Role Based Access Control Administrator lists (2)
Microsoft.Authorization/roleAssignments/writeMicrosoft.Authorization/roleAssignments/delete
Permissions only User Access Administrator lists (1)
Microsoft.Authorization/*
Azure roles use wildcards such as *, and NotActions take permissions away, so a role can cover an action without listing it. Check the role pages for the full picture.
Role Based Access Control Administrator explained User Access Administrator explained
Spotted something out of date or wrong? Tell us and we'll fix it.