Our Mission
Azure RBAC Catalog is a completely free, educational tool designed to help Azure administrators, security professionals, and developers understand and work with Azure's Role-Based Access Control (RBAC) system.
We believe that understanding permissions and roles should be accessible to everyone working with Azure, whether you're studying for a certification, designing a security architecture, or troubleshooting access issues.
What We Offer
📋 Complete Role Catalog
Browse all 865+ Azure built-in roles with full permission details and JSON definitions.
🔍 Operations Browser
Explore 21253+ Azure resource provider operations with detailed descriptions and see which roles grant each permission.
📊 Change Tracking
Monitor when Microsoft adds, modifies, or deprecates built-in roles.
🤖 Role Recommender
Find the least-privilege role for your specific permission requirements.
Frequently Asked Questions
Is this tool free?
Yes, completely free. There are no paid tiers, subscriptions, or hidden costs. This is an educational resource for the Azure community.
Where does the data come from?
All role and operation data is sourced directly from the Azure Management API. We scan daily to keep the catalog up-to-date with Microsoft's latest changes.
Is this affiliated with Microsoft?
No. This is an independent, community resource. We are not affiliated with, endorsed by, or officially connected to Microsoft in any way.
How accurate is the data?
We pull data directly from Azure's APIs, so it reflects the current state of Azure's built-in roles. However, always verify against official Microsoft documentation for production decisions.
Can I use this for my organization?
Absolutely! Use it to research roles, design RBAC strategies, train team members, or as a reference during security reviews.
Disclaimer
This site is provided for educational and informational purposes only. It is not affiliated with or endorsed by Microsoft. Content is provided "as is" without warranty of any kind. Always consult official Microsoft documentation and test in non-production environments before making RBAC changes in your Azure subscriptions.