Examkin

Question

Difficulty: EasyAzure Role-Based Access Control (RBAC)

An administrator needs to delegate access across multiple Azure resources. Evaluate the following statement: Assigning an Azure Role-Based Access Control (RBAC) role to a user at the management group scope automatically propagates that role assignment down to all subscriptions, resource groups, and resources nested within that management group hierarchy.

Answer: Answer

Answer

True
Azure RBAC is designed with a hierarchical structure where permissions flow downwards. A role assigned at the management group level will be inherited by all resource scopes nested under it, including subscriptions, resource groups, and resources.

Step-by-Step Solution

1
Identify the scope where the role is being assigned.
The role assignment is initiated at the management group level, which is a high-level container in the Azure resource hierarchy.
Determining the point of assignment helps evaluate how permissions will propagate.
2
Determine the rules of Azure RBAC permission propagation.
Azure RBAC uses inheritance, meaning permissions applied at a parent scope automatically apply to all child scopes.
Understanding inheritance is necessary to determine if child scopes receive the permissions.
3
Apply the inheritance rules to the target resources.
Since subscriptions, resource groups, and resources are child scopes of a management group, they will all inherit the assigned role.
This confirms that the statement is correct.

Key Concept

Azure RBAC Scope and Inheritance
Rate this question

Topics

Azure Role-Based Access Control (RBAC)

More questions from this topic