Exam AZ-103 topic 16 question 45 discussion

Actual exam question from Microsoft's AZ-103

Question #: 45
Topic #: 16

HOTSPOT -
You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.
You need to create a custom RBAC role named CR1 that meets the following requirements:
✑ Can be assigned only to the resource groups in Subscription1
✑ Prevents the management of the access permissions for the resource groups
✑ Allows the viewing, creating, modifying, and deleting of resource within the resource groups
What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer: Explanation
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresources

by TV at March 28, 2020, 11:57 a.m.

Comments

Submit Cancel

YPR

4 years, 11 months ago

/resourceGroups "Microsoft.Authorization/*"

upvoted 3 times

YPR

4 years, 11 months ago

Sorry, the correct answer is : Box 1: /subscription/subscription id Box 2: Microsoft Authorization

upvoted 5 times

praveen97

4 years, 11 months ago

Agree with YPR. '/subscriptions/SubscriptionID/resourceGroups/' will give error since it is looking for a specific resource group name here. First answer should be /subscriptions/SubscriptionID Second answer is correct. It is Microsoft.Authorization/*

upvoted 1 times

...