Hotspot Question You need to implement the Azure RBAC role assignment. The solution must meet the authentication and authorization requirements. How many assignment should you configure for the…

Question

Exhibit

Answer Area

• Network Contributor:2
  1215
• Role1:1
  1

Explanation

This question tests understanding of Azure RBAC role assignments, specifically how many Network Contributor role assignments are needed for Role1 based on scope and inheritance principles.

Approach. In Azure RBAC, role assignments are scoped and inherited downward through the hierarchy (Management Group > Subscription > Resource Group > Resource). The correct number of assignments for the Network Contributor role depends on the scope level at which Role1 needs access. If Role1 requires Network Contributor access across multiple subscriptions or resource groups that do not share a common parent scope where a single assignment would suffice, multiple assignments are needed - one per distinct scope. Typically, if the requirements specify access at a specific resource group or subscription level without a shared parent, you configure one assignment per required scope. The answer is most commonly '1' if a single scope covers all required resources, or a higher number if multiple non-inheriting scopes are involved.

Concept tested. Azure Role-Based Access Control (RBAC) role assignment scoping and inheritance - understanding that a single role assignment at a higher scope (e.g., subscription) propagates to child scopes (resource groups, resources), reducing the total number of assignments needed, while assignments at lower scopes require individual configuration per scope.

Reference. https://learn.microsoft.com/en-us/azure/role-based-access-control/overview#how-azure-rbac-works

No community discussion yet for this question.