Azure Entra ID identity model: Service Principals, Managed Identities from first principles
Azure resources have no identity by default. This is the full mental model — Entra ID hierarchy, Service Principals, Managed Identities, RBAC, and API permissions — built from first principles, with diagrams.