Exam AI-100 topic 1 question 22 discussion

I believe the second answer should be owner. They need to be able to change role assignments for other members of their team.

Owner Lets you manage everything, including access to resources. Contributor Lets you manage everything except granting access to resources. Second answer should be owner

Contributor can grant access; Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries (From Microsoft Site)

Owner - Has full access to all resources including the right to delegate access to others. Contributor - Can create and manage all types of Azure resources but can't grant access to others. https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps

Workspace and owner

Thinks the second answer should be "Contributor". Contributor can manages their published services (which in the configuration it is "owner") so the contributor will maintain some level of functionality like granting access to others on the service they published (pure speculation). Another reasoning is in the link here with a reference for different personas:https://docs.microsoft.com/en-us/machine-learning-server/operationalize/configure-roles#how-are-roles-assigned The data scientists mentioned in this question will be equivalent "R programmer" or "Python Programmer" personas where they will only focuses on the experiments they are working on.

https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles : Contributor Create and manage all of types of Azure resources Create a new tenant in Azure Active Directory Cannot grant access to others : contributor cannot grant access/permissions to others. Owner is th right answer

Owner! Owner is scoped for the Workspace here and cannot access the RG anyway. Giving only Contributor cannot do squat for members of the team.

Second answer needs to be Owner, as the mentioned link clearly states: https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles Manage workspace access If you're an owner of a workspace, you can add and remove roles for the workspace. Y

hold on.. let me put my thoughts// 1. The groups must have access to only their own experiments and 2.must be able to grant permissions to the members of their team. Here point is clear. Point 2 meaning means user to authenticate to workspace . Isn;t it...[[[ it doesn't mean to change role assignments. ]]] So Contributor is Fine.

Manage workspace access If you're an owner of a workspace, you can add and remove roles for the workspace. You can also assign roles to users. Use the following links to discover how to manage access: Azure portal UI PowerShell Azure CLI REST API Azure Resource Manager templates If you have installed the Azure Machine Learning CLI, you can use CLI commands to assign roles to users: Azure CLI Copy Try It az ml workspace share -w <workspace_name>

I just read this in Azure Portal when I try to add new Machine Learning Studio (classic) Workspace: "As the owner of a Workspace, you can invite other users to share the Workspace so you can collaborate with them on predictive analytics solutions."

answer Workplace and Owner https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles

Owner--> Full access to the workspace, including the ability to view, create, edit, or delete (where applicable) assets in a workspace. Additionally, you can change role assignments. https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles#default-roles

Contributor is correct. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor

nowhere could I find that contributor can grant permissions to other members. second one has to be owner like most have said here

https://docs.microsoft.com/en-us/azure/machine-learning/how-to-assign-roles#default-roles Workspace & Owner