General availability: Azure Role-Based Access Control with custom roles
Azure Role-Based Access Control (RBAC) provides fine-grained access management for Azure resources, so you can grant users only the rights they need to perform their jobs by using built-in or custom roles. RBAC is provided at no additional cost to all Azure subscribers. You can download the RBAC command-line management tools or use the Azure portal to manage access for your Azure production workloads. For more information, please visit the Active Directory Team Blog.