az-104 Practice Question 1697
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage access by using RBAC
Difficulty: medium
Contoso Ltd is facing a permission bottleneck issue where multiple users require different levels of access to various Azure resources. How should you manage these permissions to ensure that each user has the minimum necessary access?
Answer Options
A
Assign the 'Contributor' role to all users.
B
Create custom roles with specific permissions and assign them to users.
C
Use the 'Reader' role and assign it to all users.
D
Assign the 'Owner' role to all users.
Correct Answer
B: Create custom roles with specific permissions and assign them to users.
Explanation
The correct answer is B. Creating custom roles with specific permissions allows you to assign the minimum necessary access to each user, thereby addressing the permission bottleneck issue. Option A is incorrect because assigning built-in roles may not provide the required level of granularity. Option C is incorrect as it does not address the creation of custom roles. Option D is incorrect because it does not specify the use of custom roles.