nerdexam
Microsoft

DP-203 · Question #387

You have a tenant in Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. The tenant contains a group named Group1. You have an Azure subscription that contains the resources shown in

The correct answer is C. REFERENCES. Caller must have REFERENCES permission on credential to use it to authenticate to storage. https://learn.microsoft.com/en-us/azure/synapse-analytics/sql/develop-openrowset

Submitted by jordan8· Mar 30, 2026Secure, monitor, and optimize data storage and data processing

Question

You have a tenant in Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. The tenant contains a group named Group1. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that members of Group1 can read CSV files from storage1 by using the OPENROWSET function. The solution must meet the following requirements:

  • The members of Group1 must use credential1 to access storage1.
  • The principle of least privilege must be followed.

Which permission should you grant to Group1?

Exhibit

DP-203 question #387 exhibit

Options

  • AEXECUTE
  • BCONTROL
  • CREFERENCES
  • DSELECT

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    12% (3)
  • C
    77% (20)
  • D
    4% (1)

Explanation

Caller must have REFERENCES permission on credential to use it to authenticate to storage. https://learn.microsoft.com/en-us/azure/synapse-analytics/sql/develop-openrowset

Topics

#OPENROWSET#database scoped credential#least privilege#Synapse serverless SQL

Community Discussion

No community discussion yet for this question.

Full DP-203 Practice