Right ans, DataAction[] is used at blob level, Action [] is used at container and storage acc level.

The Actions permission specifies the management operations that the role allows to be performed. It is a collection of operation strings that identify securable operations of Azure resource providers (in this case it is Microsoft.Storage). The DataActions permission specifies the data operations that the role allows to be performed to your data within that object. Correct answer is D - Action[]

D. Actions

Correct answer, Action for management plane Data action for data plane

D. Actions []

D is the right answer. Role-based access control for control plane actions is specified in the Actions and NotActions properties of a role definition. Here are some examples of control plane actions in Azure: Manage access to a storage account Create, update, or delete a blob container Delete a resource group and all of its resources https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions#control-and-data-actions

Answer = B DataActions Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete Returns the result of deleting a blob Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read Returns a blob or a list of blobs Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#compute

D is correct answer.

D is correct answer.

I'd say answer is B You create a storage account through the control plane. You use the data plane to read and write data in the storage account. https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/control-plane-and-data-plane

Correct Answer : D

D is correct

All Answers are correct and regarding the last one, so Virtual Administrator can use for login and not resetting the password.

correct

Correct