sc-500 Practice Question 2003
Exam: sc-500
Domain: Manage identity and access for AI
Topic: Configure RBAC for AI workloads
Difficulty: medium
In an Azure environment, you need to configure roles for managing Azure OpenAI services and ensuring that the AI workloads have access to specific Cognitive Services resources. Which Azure role should you assign to the service principal to allow it to manage both Azure OpenAI services and Cognitive Services Custom Readers, while also ensuring that the service principal can manage managed identities within the workspace?
Answer Options
A
Cognitive Services Contributor
B
Azure OpenAI Contributor
C
Contributor
D
Reader
Correct Answer
B: Azure OpenAI Contributor
Explanation
The correct answer is B because the 'Azure OpenAI Contributor' role provides the necessary permissions to manage Azure OpenAI services, including the ability to manage Cognitive Services Custom Readers and workspace managed identities. The 'Cognitive Services Contributor' role only allows management of Cognitive Services resources but not Azure OpenAI services. The 'Contributor' role is too broad and would provide unnecessary permissions. The 'Reader' role does not provide sufficient permissions for managing both Azure OpenAI services and Cognitive Services Custom Readers.