> Lower levels inherit role permissions from higher levels...When you assign a role at a parent scope, those permissions are inherited to the child scopes

from the docs: https://learn.microsoft.com/en-us/azure/role-based-access-co...

I don't understand what's surprising about this.

weird! i guess our brains work differently. keep inheritance away from my RBAC. that's a simple concept. i guess my brain is dumber than your brain.