az-104 Practice Question 1698
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage access by using RBAC
Difficulty: medium
Contoso Ltd needs to assign a role to a user at the subscription level but wants to limit the scope of the role assignment to a specific resource group. How should you proceed with this task?
Answer Options
A
Assign the role at the subscription level without specifying any resource groups.
B
Assign the role at the subscription level and specify the resource group in the role assignment.
C
Assign the role at the resource group level without specifying the subscription.
D
Assign the role at the management group level and specify the resource group.
Correct Answer
B: Assign the role at the subscription level and specify the resource group in the role assignment.
Explanation
The correct answer is B. Assigning a role at the subscription level and then specifying the resource group in the role assignment ensures that the user's access is limited to the desired scope. Option A is incorrect because it does not specify the resource group. Option C is incorrect as it does not address the role assignment at the subscription level. Option D is incorrect because it does not specify the use of a role assignment.