Azure authority
A narrowly scoped evidence guide to Azure authorization concepts, telemetry context, and the detection rules that consume one ARM operation.
Create an Azure role assignment
Microsoft.Authorization/roleAssignments/write
The action permits creating a role assignment that connects a target principal, role definition and scope. [1] [2]
Partial rule analysis. 3 direct operation detections and 2 partial or ambiguous relationships.
Browse the broader Azure Activity Log catalog for provider and event context.Sources