An administrator is configuring access permissions for a team of developers who need to manage virtual machines in a resource group named Dev-RG. Which of the following statements are correct regarding the behavior and capabilities of Azure Role-Based Access Control (RBAC) in this scenario? (Select TWO options)
- Assigning the Owner role to a user at the subscription level automatically grants them Owner permissions for all resources inside Dev-RG through inheritance.Cevap
- Assigning the Contributor role to a developer at the Dev-RG level allows them to create and manage virtual machines within the resource group.Cevap
- CAssigning the Reader role to a developer allows them to enforce a policy that prevents other users from deleting virtual machines in Dev-RG.
- DAssigning the User Access Administrator role to a developer is required to limit the virtual machine sizes they can deploy inside Dev-RG.
Cevap
The correct statements are that assigning the Owner role at the subscription level grants owner permissions to all resources in Dev-RG through inheritance, and assigning the Contributor role at the Dev-RG level allows creating and managing virtual machines.
Azure RBAC allows fine-grained access management. Assigning Owner at the subscription level ensures the permissions inherit down to all resource groups within it, including Dev-RG. Assigning Contributor at the resource group level gives users the necessary rights to create and manage virtual machines within that specific resource group.
Adım Adım Çözüm
Anahtar Kavram
Azure Role-Based Access Control (RBAC) built-in roles and scope inheritance