Examkin

Soru

Zorluk: KolayAzure Role Assignments and Scopes

An administrator configures the following Azure resource hierarchy:

* Management Group: `MG-Enterprise`
* Subscription: `Sub-Dev`
* Resource Group: `rg-testing`

A user named Developer1 is assigned the Contributor role at the `Sub-Dev` subscription scope. No other role assignments are configured.

What is Developer1's effective permission for resources within the `rg-testing` resource group?

  1. Developer1 has Contributor permissions on all resources within the resource group due to scope inheritance.Cevap
  2. B
    Developer1 has no permissions within the resource group because role assignments do not inherit downward from a subscription to a resource group.
  3. C
    Developer1 has Reader permissions within the resource group by default and must be explicitly assigned the Contributor role at the resource group scope to modify resources.
  4. D
    Developer1 only has Contributor permissions if they are also assigned an administrator role at the Microsoft Entra ID tenant level.

Cevap

Developer1 has Contributor permissions on all resources within the resource group due to scope inheritance.
The correct answer is that Developer1 has Contributor permissions on all resources within the resource group due to scope inheritance. In Azure, role assignments are inherited down the resource hierarchy: Management Group -> Subscription -> Resource Group -> Resource. Since the Contributor role was assigned at the subscription scope, it automatically applies to the child resource group.

Adım Adım Çözüm

1
Identify the scope at which the Contributor role is assigned.
The Contributor role is assigned at the subscription scope (Sub-Dev).
Understanding the point of assignment is necessary to trace permission flow.
2
Apply the Azure RBAC inheritance rules to the resource hierarchy.
The resource group (rg-testing) is a child of the subscription (Sub-Dev), so it inherits the Contributor assignment.
Azure RBAC propagates permissions from parent scopes down to child scopes.
3
Determine the final effective permissions on resources in the resource group.
Developer1 has Contributor permissions on all resources in rg-testing.
Inherited permissions provide the same level of access as if they were assigned directly at the child scope.

Anahtar Kavram

Azure RBAC role assignments inherit down the resource hierarchy from management groups to subscriptions, resource groups, and individual resources.
Bu soruyu puanla

Konular

Azure Role Assignments and Scopes

Bu konudan daha fazla soru