Starting in December 2025, Azure automatically assigned the Owner role at subscription scope to users in the public cloud who were still assigned the Co-Administrator or Service Administrator role. As of May 2026, classic administrator roles are fully retired and you must assign roles in Azure role-based access control (RBAC) to manage access. This article lists the Azure built-in roles for Azure role-based access control (Azure RBAC) in the Management and governance category.

Understanding the Context

It lists Actions, NotActions, DataActions, and NotDataActions. This article lists the Azure built-in roles for Azure role-based access control (Azure RBAC) in the Web and Mobile category. It lists Actions, NotActions, DataActions, and NotDataActions. This article lists the Azure built-in roles for Azure role-based access control (Azure RBAC) in the Identity category.

Key Insights

It lists Actions, NotActions, DataActions, and NotDataActions. Critical Role‘s Campaign 4 is officially here. The fourth core chapter of the beloved TTRPG actual play series has arrived, and this time, it’s helmed by Brennan Lee Mulligan—yes, for the first time ... Learn how to add app roles to an application registered in Microsoft Entra ID. Assign users and groups to these roles, and receive them in the 'roles' claim in the token.

Final Thoughts

Add app roles to your application and receive them in the token Azure role-based access control (Azure RBAC) has several Azure built-in roles that you can assign to users, groups, service principals, and managed identities. Role assignments are the way you control access to Azure resources. If the built-in roles don't meet the specific needs of your organization, you can create your own Azure custom roles. Fixed database roles are defined at the database-level and exist in each database. Members of the db_owner database role can manage fixed database role membership. There are also some special-purpose database roles in the msdb database.

You can add any database account and other SQL Server roles into database-level roles.