• These are used elsewhere like in azure governance
  • So in RBAC what azure roles apply to which plane - control or data
  • Someone might not have access to manage a VM, but they might have access to login to the OS

Control Plane

• To manage resource in Azure
• In [[202406151100 How to interact with Azure|How to interact with Azure]], everything goes through ARM
  • All requests go to a resource manager url
  • ARM knows what exists and what does not exist and does not create duplicate resources

Data Plane

• To access features exposed by the resource
• Requests go to specific endpoint for the Azure resource

references:

Learn - ARM