It also allows administrators to apply access controls to all services in a resource group with role-based access control (RBAC), which is integrated into ARM