New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft AZ-400 Exam - Topic 5 Question 112 Discussion

Actual exam question for Microsoft's AZ-400 exam
Question #: 112
Topic #: 5
[All AZ-400 Questions]

You have an Azure subscription that contains an Azure Pipelines pipeline named Pipeline1 and a user named User1. Pipeline1 is used to build and test an app named Appl. User1 is assigned the Contributors role for Pipeline1.

You plan to test App1 by using an Azure Deployment Environments environment.

You need to ensure that User1 can provision the environment. The solution must follow the principle of least privilege.

Which role should you assign to User1?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Jeffrey
3 months ago
Surprised it's not just the Contributors role!
upvoted 0 times
...
Malcom
3 months ago
I thought Build Administrators would be enough.
upvoted 0 times
...
Cheryl
3 months ago
Wait, can Contributors even provision environments?
upvoted 0 times
...
Mitsue
4 months ago
Definitely agree, that's the least privilege option!
upvoted 0 times
...
Kaitlyn
4 months ago
User1 needs the Deployment Environments User role.
upvoted 0 times
...
Camellia
4 months ago
I feel like I saw something about Deployment Environments User being the right role in a study guide. It seems to fit the scenario best.
upvoted 0 times
...
Weldon
4 months ago
I'm a bit unsure about this one. I know Contributors can do a lot, but I'm not sure if they can provision environments.
upvoted 0 times
...
Jacquelyne
4 months ago
I practiced a similar question where we had to assign roles for Azure resources. I think B could be the right choice since it sounds specific to deployment environments.
upvoted 0 times
...
Lon
5 months ago
I remember that the principle of least privilege means giving the minimum permissions necessary, so I think it might not be A or C.
upvoted 0 times
...
Nell
5 months ago
The question mentions that User1 is already assigned the Contributors role for Pipeline1. I wonder if that role might be sufficient, or if we need to assign a more specific role for the Deployment Environments environment.
upvoted 0 times
...
Margret
5 months ago
Based on the principle of least privilege, I would assign the Deployment Environments User role to User1. This role should provide the necessary permissions to provision the environment without granting unnecessary access.
upvoted 0 times
...
Chana
5 months ago
Hmm, I'm a bit confused. I'm not sure which role would be the best fit here. I'll need to think through the different options carefully.
upvoted 0 times
...
Sherron
5 months ago
This question seems straightforward. I think the key is to identify the role that provides the least privilege for User1 to provision the Azure Deployment Environments environment.
upvoted 0 times
...
Carma
1 year ago
A) DevCenter Project Admin. Why not go big or go home, am I right? Might as well give User1 all the access they could ever need!
upvoted 0 times
Lili
1 year ago
C) Build Administrators. No, that role is not needed for provisioning the environment.
upvoted 0 times
...
Tyra
1 year ago
B) Deployment Environments User. Exactly, it's better to only give the necessary permissions.
upvoted 0 times
...
Rosio
1 year ago
A) DevCenter Project Admin. But giving too much access can lead to security risks.
upvoted 0 times
...
Carla
1 year ago
B) Deployment Environments User. It's important to follow the principle of least privilege.
upvoted 0 times
...
...
Juan
1 year ago
B) Deployment Environments User. Sounds like the perfect role for this scenario. Gotta love that principle of least privilege!
upvoted 0 times
...
Rozella
1 year ago
D) Contributors. This role should already be sufficient to allow User1 to manage the pipeline and deploy the app.
upvoted 0 times
Gianna
1 year ago
D) Contributors
upvoted 0 times
...
Cecilia
1 year ago
A) DevCenter Project Admin
upvoted 0 times
...
Wenona
1 year ago
D) Contributors. This role should already be sufficient to allow User1 to manage the pipeline and deploy the app.
upvoted 0 times
...
Dorthy
1 year ago
D) Contributors
upvoted 0 times
...
Cheryl
1 year ago
B) Deployment Environments User
upvoted 0 times
...
Filiberto
1 year ago
D) Contributors
upvoted 0 times
...
Glenn
1 year ago
B) Deployment Environments User
upvoted 0 times
...
...
Lazaro
1 year ago
I'm not sure about that. I think User1 should be assigned the DevCenter Project Admin role to ensure they have all the necessary permissions for provisioning the environment.
upvoted 0 times
...
Queenie
1 year ago
I agree with Celeste. The Deployment Environments User role would give User1 the necessary permissions without granting unnecessary access.
upvoted 0 times
...
Melvin
1 year ago
B) Deployment Environments User. This gives User1 the necessary permissions to provision the environment without granting more access than required.
upvoted 0 times
Isadora
1 year ago
Agreed. It's always best to limit access to only what is needed.
upvoted 0 times
...
Lisbeth
1 year ago
Definitely, we want to ensure that User1 only has the necessary permissions.
upvoted 0 times
...
Izetta
1 year ago
That makes sense. It's important to follow the principle of least privilege.
upvoted 0 times
...
Merilyn
1 year ago
B) Deployment Environments User
upvoted 0 times
...
...
Celeste
1 year ago
I think User1 should be assigned the Deployment Environments User role.
upvoted 0 times
...

Save Cancel