Your organization has an Azure subscription containing a single resource group named RG1. You need to assign the appropriate built-in Azure Role-Based Access Control (RBAC) roles to three administrative users to meet their specific requirements while adhering to the principle of least privilege. Match each user requirement on the left to the correct built-in Azure RBAC role on the right.
- Delegate access permissions to other users for all resources within RG1.Owner
- Create and manage virtual machines, including restarting them and attaching disks, without managing network settings or assigning permissions.Virtual Machine Contributor
- View the configuration and status of all resources in RG1 without making any modifications.Reader
Cevap
Match the requirement to delegate access permissions to the Owner role; match the requirement to create and manage virtual machines without network or permission privileges to the Virtual Machine Contributor role; and match the requirement to view resource configurations without making modifications to the Reader role.
Matching the requirements to Owner, Virtual Machine Contributor, and Reader aligns with Azure RBAC roles designed for authorization delegation, VM-specific management, and read-only access respectively.
Adım Adım Çözüm
Anahtar Kavram
Azure Built-in Roles and Least Privilege