ACLs

ADLS Gen2 Access Control with ACLs - Fine-Grained Security

Both work together - a user needs both RBAC permission to access the storage account AND appropriate ACL permissions on the specific path.