What is the difference between Azure AD roles and Azure RBAC?

Short answer: Azure AD roles – Manage identity and directory-level permissions (e.g., User Administrator, Global Admin) Azure RBAC – Manage resource-level permissions (e.g., Reader, Contributor, Owner) Both work together to enforce security and access control in Azure.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.