Which mechanism is used to grant permissions to Azure Virtual Desktop resources?

Role-based access control (RBAC) roles are the correct mechanism for granting permissions to Azure Virtual Desktop resources. RBAC allows you to manage who has access to Azure resources, what they can do with those resources, and what areas they have access to. For Azure Virtual Desktop, this means you can assign specific roles (like Desktop Virtualization User, Contributor, or Reader) to users or groups, defining their level of access to host pools, application groups, and workspaces. Tags are used for organizing and categorizing resources. Resource groups are logical containers for Azure resources. Application security groups are used to group virtual machines and define network security policies.