Which Key Vault permission model provides fine-grained access control using Azure RBAC roles instead of vault-level access policies?

1. A Vault access policies
2. ✓ B Azure RBAC (Key Vault Secrets User, Key Vault Reader, etc.) (correct answer)
3. C SAS token access
4. D Shared access signature

Shortcut: RBAC permission model enables precise role assignments at resource, vault, or individual secret/key/certificate level. Recommended over vault access policies for better auditability and least-privilege.