Examkin

Soru

Zorluk: ZorAzure Role-Based Access Control (RBAC)

An Azure administrator assigns a user the Reader role at a management group level and the Contributor role on a specific resource group within a subscription in that management group. If a new resource group is created in the same subscription, is the statement true or false that the user will automatically inherit Contributor permissions for the new resource group?

Cevap: Cevap

Cevap

The statement is false. The user will only inherit the Reader role on the new resource group because the Contributor role was assigned only at the scope of a different resource group, and permissions do not propagate horizontally to other resource groups.
The correct answer is false because permissions in Azure RBAC inherit downwards through the management hierarchy. Since the Contributor role is scoped specifically to another resource group, it has no effect on the new resource group, which only inherits the Reader role from the management group level.

Adım Adım Çözüm

1
Analyze the scope of the Reader role assignment.
The Reader role is assigned at the management group level, which is a parent scope of the subscription and all resource groups within it.
To identify which permissions will inherit down the entire resource hierarchy.
2
Evaluate the inheritance of the Reader role on the new resource group.
The new resource group inherits the Reader role assignment from the management group.
Azure RBAC inheritance flows downwards from parent scopes to child scopes.
3
Analyze the scope of the Contributor role assignment.
The Contributor role is assigned at the scope of a specific, pre-existing resource group, not at the subscription or management group level.
To determine if the Contributor role has a scope that covers the new resource group.
4
Evaluate if the Contributor role applies to the new resource group.
The Contributor role does not apply to the new resource group because roles assigned at a resource group level do not propagate horizontally to other resource groups.
Azure RBAC assignments only apply to the target resource and its descendants, not to sibling resources.

Anahtar Kavram

Azure RBAC inheritance and scoping rules
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru