Exam AZ-400 topic 9 question 65 discussion

A. pipeline:No, da permiso sobre todo el pipeline, no solo final1 B. organization:No, demasiado amplio, da acceso a todo C. stage: Sí, es el nivel más específico para controlar solo la etapa final1 D. project:No, demasiado amplio, controla todo el proyecto

gpt anwser : Azure Pipelines does not support granting permissions specifically at the stage level. Permissions in Azure DevOps are hierarchical and are typically managed at broader levels, such as the pipeline, project, or organization. A is the correct anwser

Can we interpret the question for YAML pipelines or Release Pipeline? I would go with A and assume it i san YAML pipeline

Principle of Least Privilege: To follow the principle of least privilege, you should grant User1 permissions specifically at the level they need access to, which is the stage level for deleting final1 in Pipeline1. Other Options: A. Pipeline: Granting permissions at the pipeline level would provide broader access than necessary, allowing User1 to make changes to other parts of Pipeline1, not just final1. B. Organization: This would provide access across all pipelines and resources in the organization, which is far beyond what’s required. D. Project: This would give User1 permissions across the entire project, which again exceeds the least privilege needed.

provided answer looks correct for me. https://learn.microsoft.com/en-us/azure/devops/pipelines/policies/permissions?view=azure-devops#set-release-stage-permissions

Azure DevOps does not have direct permissions for individual stages.

Azure DevOps does not have direct permissions for individual stages