Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft DP-420 Exam - Topic 2 Question 75 Discussion

You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.Which roles should you assign to User1?
A) CosmosDB Operator only
B) DocumentDB Account Contributor and Cosmos DB Built-in Data Contributor
C) DocumentDB Account Contributor only
D) Cosmos DB Built-in Data Contributor only

Microsoft DP-420 Exam - Topic 2 Question 75 Discussion

Actual exam question for Microsoft's DP-420 exam
Question #: 75
Topic #: 2
[All DP-420 Questions]

You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.

You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.

Which roles should you assign to User1?

Show Suggested Answer Hide Answer
Suggested Answer: A

Cosmos DB Operator: Can provision Azure Cosmos accounts, databases, and containers. Cannot access any data or use Data Explorer.

Incorrect Answers:

B: DocumentDB Account Contributor can manage Azure Cosmos DB accounts. Azure Cosmos DB is formerly known as DocumentDB.

C: DocumentDB Account Contributor: Can manage Azure Cosmos DB accounts.


by Chandra at Apr 12, 2026, 04:24 PM

Limited Time Offer

25%

Off

Get Premium DP-420 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Curtis
4 days ago
I feel like C is too limited. User1 needs to insert.
upvoted 0 times
...
Rima
9 days ago
True, but we need least privilege. D is safer.
upvoted 0 times
...
Marci
14 days ago
But what about B? It gives more permissions.
upvoted 0 times
...
Lindy
20 days ago
I agree, D seems right for just inserting items.
upvoted 0 times
...
Felicidad
25 days ago
This is tricky. I think D is the best choice.
upvoted 0 times
...
Dick
30 days ago
Exactly, D is focused. Just what User1 needs.
upvoted 0 times
...
Della
1 month ago
B seems too broad. We need least privilege.
upvoted 0 times
...
Letha
1 month ago
But what about option B? It covers more roles.
upvoted 0 times
...
Izetta
2 months ago
I agree with Edison. D gives just enough access.
upvoted 0 times
...
Hillary
2 months ago
Why D? Isn't it too limited?
upvoted 0 times
...
Edison
2 months ago
I think option D is the best choice.
upvoted 0 times
...
Crissy
2 months ago
Totally agree with D), it's the least privilege approach!
upvoted 0 times
...
Henriette
2 months ago
A) doesn't allow inserts, so that's a no-go.
upvoted 0 times
...
Deja
2 months ago
Wait, can you really give just insert permissions with D)?
upvoted 0 times
...
Dean
4 months ago
I think B) is too much access for just inserting items.
upvoted 0 times
...
Tashia
4 months ago
D) Cosmos DB Built-in Data Contributor is the right choice.
upvoted 0 times
...
Marica
5 months ago
I feel like the Cosmos DB Built-in Data Contributor is the best option here, but I wonder if there are any hidden permissions I might be overlooking.
upvoted 0 times
...
Truman
5 months ago
I’m a bit confused about whether to choose just the Built-in Data Contributor or if I need to combine it with the Account Contributor role.
upvoted 0 times
...
Troy
5 months ago
I remember practicing a similar question where we had to assign roles based on least privilege. I think DocumentDB Account Contributor might be too broad for just inserting items.
upvoted 0 times
...
Lashaunda
5 months ago
I think the Cosmos DB Built-in Data Contributor role might be the right choice since it allows data manipulation, but I'm not entirely sure if it’s enough for just inserting items.
upvoted 0 times
...

Save Cancel