Exam AZ-500 topic 8 question 2 discussion

1) Microsoft.Compute/ 2) disks 3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id}

https://www.examtopics.com/discussions/microsoft/view/6772-exam-az-500-topic-11-question-2-discussion/

FROM MICROSOFT: Managed disks are under Microsoft.Compute resource provider, not Microsoft.Storage. Microsoft.Storage is used for unmanaged disks that require a storage account to hold the VHD files1. Managed disks are block-level storage volumes that are managed by Azure and used with Azure Virtual Machines2. They do not need a storage account and can be created using the Microsoft.Disks resource provider

1) Microsoft.Compute/ 2) disks 3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id}

1) Microsoft.Compute/ 2) disks 3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id}

Is there no way to select RG only in AssignableScopes? https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions#assignablescopes

# This shows that to manage disks, you need to have permissions to the storage account https://docs.microsoft.com/en-us/azure/virtual-machines/using-managed-disks-template-deployments # This shows that the scope should incl. resource group https://vincentlauzon.com/2018/08/15/rbac-and-role-assignment-using-arm-templates/#:~:text=RBAC%20and%20role%20assignment%20using%20ARM%20Templates%20Solution,scope%20%28resource%2C%20resource%20group%2C%20subscription%20or%20management%20group%29. 1) Microsoft.Storage 2) storageAccounts/* 3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id}

#exam ques # 29 Sep

Congrats those who completed all qsts.. all the best

1) Microsoft.Compute/ 2) disks 3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id} Explaination: A new custom RBAC role named Role1 must be used to delegate the administration of the managed disks in Resource Group1. Role1 must be available only for Resource Group1. This proves we need to maintain scope to ResourceGroup 1 only. Also Resource gropu 1 contanins VNet1, VM0, and VM1 none of them are storage disks