Exam AZ-103 topic 16 question 20 discussion

Actual exam question from Microsoft's AZ-103

Question #: 20
Topic #: 16

HOTSPOT -
You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.
You need to create a custom RBAC role named CR1 that meets the following requirements:
✑ Can be assigned only to the resource groups in Subscription1
✑ Prevents the management of the access permissions for the resource groups
✑ Allows the viewing, creating, modifying, and deleting of resource within the resource groups
What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer: Explanation
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresources

by TV at March 28, 2020, 12:01 p.m.

Comments

Submit Cancel

certificatores

Highly Voted 5 years, 2 months ago

https://www.examtopics.com/exams/microsoft/az-103/view/3/

upvoted 14 times

ExamGuy01

5 years ago

thanks!

upvoted 1 times

...

praveen97

4 years, 11 months ago

'/subscriptions/SubscriptionID/resourceGroups/' will give error since it is looking for a specific resource group name here. First answer should be /subscriptions/SubscriptionID Second answer is correct. It is Microsoft.Authorization/*

upvoted 4 times

...

jonnybugaloo

Highly Voted 5 years ago

Image: https://www.examtopics.com/assets/media/exam-media/03048/0001200001.png Answer: https://www.examtopics.com/assets/media/exam-media/03048/0001300001.png

upvoted 5 times

...

Pradh

Most Recent 3 years, 5 months ago

some people BARK in comment section with so much confidence. 1st answer is CORRECT .Since i cannot attach screen shot , i am pasting the portal data below. Create a custom role Basics Permissions Assignable scopes JSON Review + create Add assignable scopes Click Add assignable scopes to select the scopes (management groups, subscriptions, or resource groups) where this role will be available for assignment. Your role must have at least one assignable scope. Learn more Assignable scope Type /subscriptions/447fe710-e767-4117-9ed5-5b6ef9f6e786/resourceGroups/rg Resource group

upvoted 1 times

...

Eggsamine

4 years, 10 months ago

Repeat of Topic 1, question 11: https://www.examtopics.com/exams/microsoft/az-103/view/3/

upvoted 4 times

...