Role assignments are the way you control access to Azure resources. If the built-in roles don't meet the specific needs of your organization, you can create your own Azure custom roles. For information about how to assign roles, see Steps to assign an Azure role. This article lists the Azure built-in roles.

Select Access control (IAM), then select + Add followed by Add role assignment. Select the role you want to assign to the Azure Virtual Desktop service principal, then select Next. Ensure Assign access to is set to Microsoft Entra user, group, or service principal, then select Select members.

You can have up to 4000 role assignments in each subscription. This limit includes role assignments at the subscription, resource group, and resource scopes. Eligible role assignments and role assignments scheduled in the future do not count towards this limit.

Azure role-based access control (Azure RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to. Azure RBAC is an authorization system built on Azure Resource Manager that provides fine-grained access management to Azure resources.