Exam AI-102 topic 15 question 2 discussion

How about Cognitive Service User? the link explicitly says publish is given to this role. https://docs.microsoft.com/en-us/azure/cognitive-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role

The Owner role would give the leadership team the ability to publish changes, but also the additional capability to give others access to QnA maker, which they do not require. security best practices (in case of a compromised account etc) dictate the principles of least privilege; leadership team should only be given access to the capabilities they require to do their job and nothing more. Since the problem only mentions publishing, the leadership team requires the role contributor. In other RBAC exam questions for other certs MSFT remembers to preface such a question with "bearing in mind the principle of least privilege..." but they neglected that hint here.

AllUsers: QnA Maker Editor Leadership team: Cognitive Service User

I think given answers are correct. ChatGPT 3.5 confirms it

1. QnA Maker Editor 2. Cognitive Service User

1. QnA Maker Editor 2. Cognitive Service User

1. QnA Maker Editor 2. Cognitive Service User

Is this question still available on May 21, 2024?

The leadership should have permission to publish!!! here is why AllUsers: QnA Maker Editor Leadership team: Cognitive Service User Key Differences in Privilege Scope Specificity: The QnA Maker Editor role is specific to the QnA Maker service with a focus on content editing, while the Cognitive Service User role is more general and can encompass a broader range of tasks across Azure Cognitive Services. Publishing the Knowledge Base: The ability to publish the knowledge base to make it live is a critical task. The QnA Maker Editor might have restricted access in this regard, requiring administrative approval, whereas a Cognitive Service User with the right permissions could directly publish changes.

1. Cognitive Services QnA Maker Editor 2. Cognitive Services User See https://learn.microsoft.com/en-us/azure/ai-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role

1. QnA Maker Editor 2. Cognitive Service User https://learn.microsoft.com/en-us/azure/cognitive-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role - QnA Maker Editor (read/write) - Cognitive Service User (read/write/publish)

AllUsers: QnA Maker Editor (read/write) Leadership Team: Cognitive Service User (read/write/publish) Leadership team does not need to add resources

on my exam. (2023-01-16 passed) My Answer: 1. QnA Maker Editor 2. Cognitive Service User

To address the requirement: Provide all employees with the ability to edit Q&As. Only senior managers must be able to publish updates. AllUsers: QnA Maker Editor (read/write) Leadership Team: Cognitive Service User (read/write/publish) Cognitive Service User has less permissions than Contributor.

AllUsers: QnA Maker Editor LeadershipTeam: Contributor

Was on exam 27/11/2021

from case study: Provide all employees with the ability to edit Q&As. Only senior managers must be able to publish updates, so the given answer is correct