I passed this exam today 24 Mars 2022 with score 900. This question was part of this exam. 90% of question s from the Dumps. Thank to y'all guys and especially @MLANTONIS great Guy !!!!!

passed 902. in exam 29.12.21 - resource policy contributor for sub1, resource contributor for rg2

Got this use case and question Sep 25th.

I am afraid you guys are wrong.. In technical requirements it says: "Enable User1 to create Azure policy definitions and User2 to assign Azure policies to RG1." In Hotspot it also says that User2 should also assign policies to RG2. It means that User1 needs to create Policies on Sub level and User2 needs to assign policies to RG2. Box1: Resource Policy Contributor for Sub1 (needs to create policies) Box2: IT'S RG1 + RG2, NOT RG2!!!! So the only reasonable answer is Contributor for Sub1 (which is an overkill IMHO, but it's the only correct answer having two RG's in mind)

Given answer looks good and meats least privilege; https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#resource-policy-contributor

This was in the exam on 5/30/23

This was on my test this evening 25/04/2023

Answer Valid, In exam today 08 April 2023. Scored 830.

Answer valid! This question was on the exam 02/04/2023. Scored 920.

Cleared Exam 930 was appeared in exam 18/3/2023 ANS most upvoted

To create and assign initiatives, we need to assign the Resource Policy Contributor within Sub1 and RG2 for the respective users. As per Microsoft documentation, Resource Policy Contributor provides “users with rights to create/modify resource policy, create a support ticket and read resources/hierarchy”. Reference: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#resource-policy-contributor

Resource Policy Contributor https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#resource-policy-contributor Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy. - Create and manage policy assignments - Create and manage policy definitions

Came in exam today 10/2/23

Correct answer check: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#resource-policy-contributor

"The Resource Policy Contributor role includes most Azure Policy operations. ... Contributor may trigger resource remediation, but can't create or update definitions and assignments." Reference: https://learn.microsoft.com/en-us/azure/governance/policy/overview#azure-rbac-permissions-in-azure-policy

correct answer is resource policy contributor for sub1, resource contributor for rg2. When i started reading case studies oh boy getting sleep in the middle as it is too much read :) Finally got trick to start reading questions and then look for Technical requirement and planned changes or any other details so basically Bottom to Top Approach !

- Resource Policy Contributor role - Resource Policy Contributor role The Resource Policy Contributor role includes most Azure Policy operations. Contributor may trigger resource remediation, but can't create or update definitions and assignments. Security Admin - View and update permissions for Microsoft Defender for Cloud. Same permissions as the Security Reader role and can also update the security policy and dismiss alerts and recommendations.