Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft AZ-500 Exam - Topic 2 Question 103 Discussion

You have an Azure subscription.You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account.Which property of the RBAC role definition should you configure?
D) Actions []
A) NotActions []
B) DataActions []
C) AssignableScopes []

Microsoft AZ-500 Exam - Topic 2 Question 103 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 103
Topic #: 2
[All AZ-500 Questions]

You have an Azure subscription.

You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account.

Which property of the RBAC role definition should you configure?

Show Suggested Answer Hide Answer
Suggested Answer: D

To 'Read a storage account', ie. list the blobs in the storage account, you need an 'Action' permission.

To read the data in a storage account, ie. open a blob, you need a 'DataAction' permission.


https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions

Contribute your Thoughts:

0/2000 characters
Kimi
5 days ago
Yeah, definitely! I feel like "Actions" is key here.
upvoted 0 times
...
Gilberto
10 days ago
This question is tricky! I think it's about permissions.
upvoted 0 times
...
Wenona
15 days ago
Nah, it's definitely Actions []. DataActions are for more specific scenarios.
upvoted 0 times
...
Michal
20 days ago
I thought you also had to configure DataActions [] for storage accounts?
upvoted 0 times
...
Claribel
25 days ago
Wait, can you really just use Actions [] for that? Seems too simple.
upvoted 0 times
...
Colby
1 month ago
Totally agree, Actions [] is the way to go!
upvoted 0 times
...
Chery
1 month ago
You need to set the Actions [] for read permissions.
upvoted 0 times
...
Dan
1 month ago
I’m confused about NotActions and Actions. I think we want to allow reading, so maybe Actions is the right choice, but I’m not completely certain.
upvoted 0 times
...
Cassandra
3 months ago
I practiced a similar question where we had to set permissions for a resource. I feel like AssignableScopes might be important too, but I'm leaning towards Actions.
upvoted 0 times
...
Rebecka
3 months ago
I'm not entirely sure, but I remember something about DataActions being relevant for specific resource types. Could that be it?
upvoted 0 times
...
Georgene
3 months ago
I think we need to focus on the permissions aspect, so maybe it's the Actions property that we should configure?
upvoted 0 times
...

Save Cancel