A business transitions its legacy human resources (HR) portal to a cloud-based Software as a Service (SaaS) solution. Under the shared responsibility model, the cloud provider manages the physical infrastructure, virtualization, operating systems, and the application software. Which of the following responsibilities remains with the customer?
- Configuring user access permissions and managing identity dataAnswer
- BApplying software updates and security patches to the application code
- CMaintaining the underlying virtual machines and server operating systems
- DPaying upfront capital expenditures for the physical server hardware
Answer
Configuring user access permissions and managing identity data
Under the Software as a Service (SaaS) model, the cloud provider manages the entire application, middleware, operating systems, and physical infrastructure. However, the customer always retains responsibility for managing their own data, user accounts, identities, and access configurations. Therefore, configuring user access permissions and managing identity data remains the customer's responsibility.
Step-by-Step Solution
Key Concept
Under the SaaS shared responsibility model, the customer retains responsibility for managing their own data, devices, and user accounts/identities, while the provider manages everything else.