MENU
You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.
You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.
Which roles should you assign to User1?
Suggested Answer: A
Get Premium DP-420 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Cosmos DB Operator: Can provision Azure Cosmos accounts, databases, and containers. Cannot access any data or use Data Explorer.
Incorrect Answers:
B: DocumentDB Account Contributor can manage Azure Cosmos DB accounts. Azure Cosmos DB is formerly known as DocumentDB.
C: DocumentDB Account Contributor: Can manage Azure Cosmos DB accounts.
21 comments · newest first
SA
Salena
1 month ago
Yeah, D is focused. Less risk involved.
CU
Curtis
2 months ago
I feel like C is too limited. User1 needs to insert.
RI
Rima
2 months ago
True, but we need least privilege. D is safer.
MA
Marci
2 months ago
But what about B? It gives more permissions.
LI
Lindy
2 months ago
I agree, D seems right for just inserting items.
FE
Felicidad
2 months ago
This is tricky. I think D is the best choice.
DI
Dick
3 months ago
Exactly, D is focused. Just what User1 needs.
DE
Della
3 months ago
B seems too broad. We need least privilege.
LE
Letha
3 months ago
But what about option B? It covers more roles.
IZ
Izetta
3 months ago
I agree with Edison. D gives just enough access.
HI
Hillary
3 months ago
Why D? Isn't it too limited?
ED
Edison
3 months ago
I think option D is the best choice.
CR
Crissy
4 months ago
Totally agree with D), it's the least privilege approach!
HE
Henriette
4 months ago
A) doesn't allow inserts, so that's a no-go.
DE
Deja
4 months ago
Wait, can you really give just insert permissions with D)?
DE
Dean
5 months ago
I think B) is too much access for just inserting items.
TA
Tashia
6 months ago
D) Cosmos DB Built-in Data Contributor is the right choice.
MA
Marica
6 months ago
I feel like the Cosmos DB Built-in Data Contributor is the best option here, but I wonder if there are any hidden permissions I might be overlooking.
TR
Truman
6 months ago
I’m a bit confused about whether to choose just the Built-in Data Contributor or if I need to combine it with the Account Contributor role.
TR
Troy
6 months ago
I remember practicing a similar question where we had to assign roles based on least privilege. I think DocumentDB Account Contributor might be too broad for just inserting items.
LA
Lashaunda
7 months ago
I think the Cosmos DB Built-in Data Contributor role might be the right choice since it allows data manipulation, but I'm not entirely sure if it’s enough for just inserting items.