Microsoft Entra RBAC documentation
Microsoft Entra role-based access control (RBAC) manages access to Microsoft Entra resources. Assign roles to grant access, use groups to manage role assignments, create administrative units to restrict scope, or create custom roles with specific permissions.