sc-500 Practice Question 2004
Exam: sc-500
Domain: Manage identity and access for AI
Topic: Configure RBAC for AI workloads
Difficulty: medium
You are tasked with configuring managed identities for an Azure workspace that will be used by multiple AI workloads. Which Azure role should you assign to the service principal to ensure that it can manage the managed identities within the workspace without having broader permissions than necessary?
Answer Options
A
Contributor
B
Azure OpenAI Contributor
C
Workspace Managed Identity Operator
D
Reader
Correct Answer
C: Workspace Managed Identity Operator
Explanation
The correct answer is C because the 'Workspace Managed Identity Operator' role is specifically designed to manage managed identities within an Azure workspace. It provides the necessary permissions to manage managed identities without granting broader permissions that could be unnecessary or risky. The 'Contributor' role is too broad and would provide unnecessary permissions. The 'Reader' role does not provide sufficient permissions for managing managed identities. The 'Azure OpenAI Contributor' role is not relevant to managing managed identities in this context.