Exam AZ-500 topic 2 question 58 discussion

Actual exam question from Microsoft's AZ-500

Question #: 58
Topic #: 2

HOTSPOT -
You have an Azure subscription that contains the custom roles shown in the following table.

In the Azure portal, you plan to create new custom roles by cloning existing roles. The new roles will be configured as shown in the following table.

Which roles can you clone to create each new role? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-create https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal

by stvsting at July 13, 2021, 3:41 p.m.

Comments

Submit Cancel

rsharma007

Highly Voted 3 years, 10 months ago

Built-in AD roles can't be cloned, but built-in subscription roles can be. Custom roles of either type can be cloned.

upvoted 55 times

vaaws

3 years, 10 months ago

Azure AD supports 2 types of roles definitions: Built-in roles Custom roles Built-in roles are out of box roles that have a fixed set of permissions. These role definitions cannot be modified. There are many built-in roles that Azure AD supports, and the list is growing. To round off the edges and meet your sophisticated requirements, Azure AD also supports custom roles. Granting permission using custom Azure AD roles is a two-step process that involves creating a custom role definition and then assigning it using a role assignment. A custom role definition is a collection of permissions that you add from a preset list. These permissions are the same permissions used in the built-in roles. REF: https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-overview

upvoted 5 times

...

ITFranz

5 months, 1 week ago

to support second answer. built-in Azure subscriptions cannot be cloned directly. While you can create new subscriptions or move resources between subscriptions, there is no direct cloning functionality for built-in Azure subscriptions. However, there are methods to achieve similar results: Create a new subscription and manually recreate the resource structure. Use Azure Resource Manager (ARM) templates to deploy resources consistently across subscriptions.

upvoted 1 times

...

vaaws

3 years, 10 months ago

Any REF URL than we cannot clone Built-in AD Roles?

upvoted 1 times

STC007

1 year, 8 months ago

Here you have : https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-overview

upvoted 1 times

...

2 years, 5 months ago

Correct answer. You can only clone Azure built in roles to create custom roles but you cant clone Azure AD roles.

upvoted 3 times

...