az-104 Practice Question 1699
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage access by using RBAC
Difficulty: medium
Contoso Ltd has noticed that some users have been granted too many permissions across multiple Azure resources. To address this, they want to ensure that users only have the necessary permissions to perform their job functions. What is the best approach to achieve this using Azure RBAC?
Answer Options
A
Assign the 'Contributor' role to all users.
B
Create custom roles with specific permissions and assign them to users.
C
Use the 'Reader' role and assign it to all users.
D
Assign the 'Owner' role to all users.
Correct Answer
B: Create custom roles with specific permissions and assign them to users.
Explanation
The correct answer is B. Creating custom roles with specific permissions ensures that users have only the necessary permissions to perform their job functions, thus adhering to the principle of least privilege. Option A is incorrect because it does not address the creation of custom roles. Option C is incorrect as it does not specify the use of custom roles. Option D is incorrect because it does not address the principle of least privilege.