Today we are sharing the general availability of Azure Active Directory (AD) based access control for IoT Hub service APIs. You can now grant specific service API access permissions to users, service princiapls, and managed identities from your Azure AD tenant using Azure’s Role-based access control (RBAC).
To get started, grant roles with the new permissions. The built-in roles, permissions, and links to samples are published on our documentation page Control access to IoT Hub with Azure AD.