Contributor - Can create and manage all types of Azure resources but can't grant access to others. User Access Administrator - Lets you manage user access to Azure resources. References: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview