Exam AZ-500 topic 1 question 10 discussion

B. Azure Blueprints

azure Blueprints

Answer: B, Azure Blueprints Reason: When you need to replicate identical role assignments across multiple subscriptions, Azure Blueprints is the correct tool, not PIM. PIM manages just-in-time access and role activation, while Azure Blueprints allows you to define and deploy consistent role assignments across multiple subscriptions. Reference: https://learn.microsoft.com/en-us/azure/governance/blueprints/overview Note: Azure Blueprints will soon be called "Templates for Azure resource" but the functionality remains the same. (July 11, 2026)

Blue print

Blueprint Role Assignment (Subscription, Resource Group) - Add an existing user or group to a built-in role to make sure the right people always have the right access to your resources. Role assignments can be defined for the entire subscription or nested to a specific resource group included in the blueprint.

To ensure that each subscription has identical role assignments, you should make use of Azure Blueprints. Azure Blueprints provide a declarative way to orchestrate the deployment of various Azure resources, including role assignments, policies, and resource configurations. By creating an Azure Blueprint that defines the desired role assignments, you can apply the same blueprint to each subscription, ensuring consistent role assignments across all divisions.

B is the answer. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as: - Role Assignments - Policy Assignments - Azure Resource Manager templates (ARM templates) - Resource Groups

Reading the question again. Your Task is to create different subscriptions for each of your company's divisions. Can blue print be used to create new subscriptions? I have been going through Microsoft docs but nowhere found that a new subscription can be created with blueprint. Once you create subscription with PIM you can use blue print to assign various resources groups, into the subscription and add resources to resource group. As you already have the PIM previlage go ahead create subscriptions and once it is created use blueprint to check if the resources/roles are identical. But First go ahead and create subscriptions. No adjustment required is the perfect answer in this context.

 No adjustment required: Inaccurate because it overlooks the need for a solution to ensure consistent role assignments across subscriptions.  Azure Blueprints: Suitable as it enables the automated deployment of Azure resources with predefined configurations and role assignments, ensuring consistency across subscriptions.  Conditional access policies: Not suitable as they focus on access controls based on conditions like user location or device compliance, rather than ensuring identical role assignments.  Azure DevOps: Not suitable as it primarily facilitates software development processes and infrastructure management, lacking direct relevance to ensuring consistent role assignments across subscriptions. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-add-role-to-user

To make sure that all current and future subs are compliant, use Azure Blueprints (B). In the future, I think mid 2026, Blueprints will be deprecated, so you should start migrating to Template Specs and Deployment Stacks.

Azure Blueprints for ensuring identical role assignments across multiple subscriptions. PIM only manages, controls, and monitors access within a subscription.

B. Azure Blueprints

Answer is Azure Blueprints. ET sometimes give wrong answers on purpose to make sure we are not doing Parrot Learning.

The answer is Azure Blueprints

B. Azure Blueprints

Correct one is C. Azure Blueprints, Azure Blueprints can be used to create and manage resources across multiple subscriptions, ensuring that each subscription has the same set of resources, policies, and roles. By creating a blueprint that includes the required roles and permissions, you can ensure that each subscription has identical role assignments.

https://learn.microsoft.com/en-us/azure/governance/blueprints/overview