Which service packages role-based access control (RBAC) and policy rules together?

Azure Blueprint allows you to define a repeatable set of Azure resources, policies, and permissions that comply with organizational standards. It packages together RBAC assignments, Azure Policy definitions, Azure Resource Manager (ARM) templates, and resource groups, enabling consistent deployment and governance. Azure Resource Manager is the deployment and management service for Azure, but it doesn't package RBAC and policies together as a single deployable artifact like Blueprint does. An Azure Subscription is a logical container for resources and billing, not a service for packaging governance rules. Azure CLI is a command-line interface for managing Azure resources, not a service that bundles governance components.