You have an Azure subscription that contains an Azure Pipelines pipeline named Pipeline1 and a user named User1. Pipeline1 is used to build and test an app named App1. User1 is assigned the Contributo

Question

Options

• ADevCenter Project Admin
• BDeployment Environments User
• CContributors
• DBuild Administrators

• A
  8% (3)
• B
  87% (33)
• C
  3% (1)
• D
  3% (1)

Explanation

Option B (Deployment Environments User) is correct because this role grants User1 the specific permission needed to provision (create and manage) Azure Deployment Environments, while following the principle of least privilege - giving only the minimum access required to complete the task.

Why the other options are wrong:

• A (DevCenter Project Admin) has broader administrative permissions over the entire DevCenter project (including managing environments and users), which exceeds what is needed just to provision an environment.
• C (Contributors) is a general Azure RBAC role that grants wide-ranging write access across resources, far exceeding the minimum privilege needed for provisioning a deployment environment.
• D (Build Administrators) is an Azure Pipelines-specific role that manages pipeline build settings and agents - it has no relevance to Azure Deployment Environments provisioning.

Memory Tip: Think of it this way - if a user needs to use a Deployment Environment, the Deployment Environments User role is the natural fit. The naming convention itself is a clue: always match the role to the most specific task described in the question, especially when least privilege is mentioned.

No community discussion yet for this question.