RBAC Matrix

Least-privilege by design. Every human persona and service identity has a defined set of Azure RBAC roles — implemented in Bicep modules and enforced via Azure Policy. Aligned to Azure CAF (Identity), WAF Security (SE:05), Zero Trust (ZT-01), and NIST AI RMF (GOVERN 1.2).

1. Human Personas

1.1 Platform Administrator

Deploys and manages the Foundry platform infrastructure.

Azure Role	Scope	Bicep Module	Purpose
Owner	Subscription	(manual / PIM)	Deploy IaC, manage RBAC
Key Vault Administrator	Key Vault resource	key-vault.bicep	Manage secrets, keys, certificates
Cosmos DB Account Reader	Cosmos DB account	cosmos-db.bicep	View database configuration
Log Analytics Contributor	Log Analytics workspace	app-insights.bicep	Configure monitoring
API Management Service Contributor	APIM instance	api-management.bicep	Manage AI Gateway policies

1.2 Agent Developer

Creates, configures, and deploys AI agents using the Agent Factory SDK.

Azure Role	Scope	Bicep Module	Purpose
Azure AI Developer	Foundry Project	foundry-project.bicep	Create and manage agents
Cognitive Services User	Foundry Account	managed-identities.bicep	Call AI model endpoints
Key Vault Secrets User	Key Vault resource	key-vault.bicep	Read connection strings
Azure AI Search Index Data Reader	AI Search service	ai-search.bicep	Query grounding indexes
Application Insights Component Reader	App Insights	app-insights.bicep	View agent telemetry

1.3 Security Auditor

Reviews agent behavior, compliance evidence, and trust scores.

Azure Role	Scope	Bicep Module	Purpose
Reader	Resource Group	(manual / PIM)	View all resources
Cosmos DB Account Reader	Cosmos DB account	cosmos-db.bicep	Read decision ledger
Key Vault Reader	Key Vault resource	key-vault.bicep	View Key Vault metadata (not secrets)
Log Analytics Reader	Log Analytics workspace	app-insights.bicep	Run KQL audit queries
Security Reader	Subscription	(manual / PIM)	View security recommendations

1.4 FinOps / Cost Analyst

Monitors and optimizes platform costs, manages budgets.

Azure Role	Scope	Bicep Module	Purpose
Cost Management Reader	Subscription	(manual / PIM)	View cost data and budgets
Billing Reader	Billing scope	(manual)	View invoices and usage
Reader	Resource Group	(manual / PIM)	View resource configurations
Monitoring Reader	Subscription	managed-identities.bicep	View cost alert metrics

1.5 Data Scientist / Eval Engineer

Creates evaluation datasets, runs eval pipelines, reviews agent quality.

Azure Role	Scope	Bicep Module	Purpose
Azure AI Developer	Foundry Project	foundry-project.bicep	Run evaluations
Cognitive Services User	Foundry Account	managed-identities.bicep	Call AI evaluation endpoints
Azure AI Search Index Data Reader	AI Search service	ai-search.bicep	Query eval indexes
Cosmos DB Operator	Cosmos DB account	cosmos-db.bicep	Read eval results from ledger
Application Insights Component Reader	App Insights	app-insights.bicep	View continuous eval metrics

1.6 Compliance Officer

Reviews regulatory compliance, audit trails, and policy enforcement.

Azure Role	Scope	Bicep Module	Purpose
Reader	Resource Group	(manual / PIM)	View all resources
Policy Insights Data Reader	Subscription	azure-policy.bicep	View policy compliance state
Cosmos DB Account Reader	Cosmos DB account	cosmos-db.bicep	Read decision ledger for audits
Log Analytics Reader	Log Analytics workspace	app-insights.bicep	Run compliance queries
Key Vault Reader	Key Vault resource	key-vault.bicep	Verify key rotation compliance

2. Service Identities

2.1 Foundry Agent Identity (UAMI)

Identity: foundry-agent-identity-{baseName}
Created by: managed-identities.bicep

Primary workload identity used by all Foundry services.

Azure Role	Scope	Purpose
Cognitive Services User	Resource Group	Call AI model endpoints
Azure AI Search Index Data Contributor	Resource Group	Read/write search indexes
Cosmos DB Operator	Resource Group	Read/write Cosmos DB data
Key Vault Secrets User	Key Vault	Read secrets
Key Vault Crypto User	Key Vault	Encrypt/decrypt with CMK
Application Insights Component Contributor	Resource Group	Write telemetry data
Monitoring Reader	Resource Group	Read metrics

2.2 Agent Blueprint Identity (ZT-01)

Per-agent identity using Entra Agent Identity for fine-grained, per-agent authorization.

Azure Role	Scope	Purpose
Cognitive Services User	Foundry Project	Per-agent model access
Azure AI Search Index Data Reader	AI Search index	Per-agent search scope

2.3 CI/CD Pipeline Identity

GitHub Actions OIDC or Azure DevOps Service Connection.

Azure Role	Scope	Purpose
Contributor	Subscription	Deploy IaC resources
User Access Administrator	Subscription	Create RBAC assignments
Azure AI Developer	Foundry Project	Deploy agents via SDK
Key Vault Secrets Officer	Key Vault	Set deployment secrets

2.4 Runtime Interceptor (ZT-05)

Foundry Agent Identity (UAMI, shared) for the runtime interceptor.

Azure Role	Scope	Purpose
Cosmos DB Operator	Cosmos DB account	Write decision ledger entries
Key Vault Secrets User	Key Vault	Read interceptor config secrets
Monitoring Metrics Publisher	App Insights	Publish interception metrics

3. Privileged Identity Management (PIM)

For production environments, use Entra ID PIM for just-in-time elevation:

Persona	PIM-Eligible Role	Max Duration	Justification Required
Platform Administrator	Owner	4 hours	Yes
Platform Administrator	Key Vault Administrator	2 hours	Yes
Security Auditor	Security Reader	8 hours	No (standing)
Compliance Officer	Policy Insights Data Reader	8 hours	No (standing)
CI/CD Pipeline	Contributor	Per-deployment	Auto (pipeline trigger)

Related Resources

Zero Trust Architecture — ZT controls referenced by role assignments
Policy Guide — Policy packs enforced through RBAC
Deployment Guide — Bicep modules that create these role assignments
Operations Guide — Operational procedures per persona