RBAC Role Usage Audit Report

This report analyzes Azure role assignments and compares them with actual user activity logs. It identifies:

• Unused roles — roles assigned to users who haven't performed any actions
• Stale roles — users who haven’t used their permissions in over 30 days
• Over-permissioned roles — users with elevated roles performing only basic actions
• Misuse — users assigned to restricted roles (like Reader) but performing higher-privilege operations