Examkin

Soru

Zorluk: OrtaAzure Role-Based Access Control (RBAC)

A cloud engineering lead needs to delegate access management for a resource group named Production-RG to a security analyst. The security analyst must be able to assign and remove roles for other team members, but must not have permissions to create, delete, or modify any resources within Production-RG. Is the following statement true or false? Assigning the Owner role to the security analyst at the resource group scope satisfies these requirements.

Cevap: Cevap

Cevap

The statement is false. The Owner role grants full resource management permissions in addition to access control, violating the requirement. The User Access Administrator role should be used instead.
The statement is false because the Owner role provides complete control over all resources in the resource group, including resource modification and deletion. The User Access Administrator role must be used to delegate access management without resource control.

Adım Adım Çözüm

1
Analyze the security requirements for the resource group scope.
The security analyst must manage roles (assign and remove access) but must be prevented from creating, deleting, or modifying resources.
To define the minimum and maximum permission boundaries needed.
2
Evaluate the capabilities of the Azure RBAC Owner role.
The Owner role grants full control over all resources, including access management and resource management (read, write, delete).
To verify if the Owner role aligns with the restriction requirements.
3
Compare the Owner role capabilities to the principle of least privilege.
Since the Owner role allows resource modification, it fails the restriction requirement. The User Access Administrator role is the correct fit as it allows access management without resource modification rights.
To determine the truth value of the statement.

Anahtar Kavram

Azure RBAC Roles (Owner vs. User Access Administrator)
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru