Exam AZ-100 topic 5 question 22 discussion

Actual exam question from Microsoft's AZ-100

Question #: 22
Topic #: 5

HOTSPOT -
You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.
You need to create a custom RBAC role named CR1 that meets the following requirements:
✑ Can be assigned only to the resource groups in Subscription1
✑ Prevents the management of the access permissions for the resource groups
✑ Allows the viewing, creating, modifying, and deleting of resources within the resource groups
What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer: Explanation
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresources

by Yogi at Nov. 8, 2020, 4:54 p.m.

Comments

Submit Cancel

Yogi

4 years, 7 months ago

answer: "assignableScopes": [ "/subscriptions/c276fc76-9cd4-44c9-88a7-4fd71545436e/resourceGroups" ] "notActions": [ "Microsoft.Authorization/*" ],

upvoted 1 times

...