Exam AZ-303 topic 6 question 11 discussion

Actual exam question from Microsoft's AZ-303

Question #: 11
Topic #: 6

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named
Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Contributor role to the Developers group.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
The Contributor role lets you manage everything except access to resources. It allows you to create and manage resources of all types, including creating Azure logic apps.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor

by Yiannisthe7th at July 3, 2021, 7:05 p.m.

Comments

Submit Cancel

Tripp_F

Highly Voted 3 years, 11 months ago

Yes, Contributor will work, though this is not the path of least privilege. Logic App Contributor would be the best way to go if this was the only privilege needed (was incorrect in a previous question) - Logic App Operator would NOT work.

upvoted 5 times

...

Kikota12

Most Recent 3 years, 8 months ago

No mention of least privilege so it works

upvoted 1 times

...

syu31svc

3 years, 9 months ago

Answer is yes as Contributor role lets you manage everything except granting access to resources. It allows you to create and manage resources of all types, including creating Azure logic apps.

upvoted 1 times

...

rdemontis

3 years, 10 months ago

correct

upvoted 1 times

...

Yiannisthe7th

3 years, 11 months ago

YES Contributor Create and manage all of types of Azure resources Create a new tenant in Azure Active Directory Cannot grant access to others

upvoted 2 times

...