Azure RBAC: Owner vs Contributor vs Reader (and when to use each)

There are hundreds of built-in Azure roles, but three cover most of what you do — and the difference between two of them is the single most common access mistake in the cloud. Here is the model, and t