ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 278 - AZ-104 discussion

Report
Export

HOTSPOT

You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.

You need to create a custom RBAC role named CR1 that meets the following requirements:

Can be assigned only to the resource groups in Subscription1

Prevents the management of the access permissions for the resource groups

Allows the viewing, creating, modifying, and deleting of resource within the resource groups

What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 278
Correct answer: Question 278

Explanation:

Box 1: "/subscription/c276fc76-9cd4-44c9-99a7-4fd71546436e"

In the assignableScopes you need to mention the subscription ID where you want to implement the RBAC

Box 2: "Microsoft.Authorization/*"

Microsoft.Authorization/* is used to Manage authorization

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provideroperations#microsoftauthorization

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provideroperations#microsoftresources

asked 26/09/2024
Ibrahim SACCA
30 questions
User
0 comments
Sorted by

Leave a comment first