Examkin

Question

Difficulty: MediumAzure Role-Based Access Control (RBAC)

An administrator assigns a user the Reader role at the scope of an Azure subscription. Determine if the following statement is true or false: The user will automatically have read access to all resources within that subscription due to role inheritance.

Answer: Answer

Answer

True
Assigning a role at the subscription level automatically propagates those permissions to all child resource groups and resources due to the hierarchical inheritance model of Azure RBAC.

Step-by-Step Solution

1
Identify the scope at which the role assignment is made.
The Reader role is assigned at the subscription scope, which sits above resource groups and individual resources in the Azure resource hierarchy.
Understanding where the permission is applied is key to determining how it propagates.
2
Apply the Azure RBAC inheritance rules.
Permissions assigned at a parent scope (like a subscription) are inherited by all child scopes (like resource groups and resources).
This is a fundamental mechanism of Azure's governance structure.
3
Evaluate the user's access to the resources within the subscription.
Because of inheritance, the user automatically receives Reader access to all resources in all resource groups under that subscription.
Determines the truth value of the target statement.

Key Concept

Azure RBAC scope inheritance
Estimated Time:45s
Rate this question

Topics

Azure Role-Based Access Control (RBAC)

More questions from this topic