Governance & Policy Compliance
Reports Azure RBAC role assignments at subscription scope. This does not assign, revoke, or modify any access — validate and apply access changes through the customer's own Azure RBAC process.
Principal names are not resolved for this deployment — resolving a principal ID into a
name requires a separate Microsoft Graph permission this identity does not hold yet (see
docs/architecture/security-rbac.md's "Fourth permission" section). Role
assignments below still show the real, unresolved principal ID.
No role assignments ingested yet for this subscription.