DP-203 · Question #406
You have a Microsoft Entra tenant. The tenant contains an Azure Data Lake Storage Gen2 account named storage1 that has two containers named fs1 and fs2. You have a Microsoft Entra group named…
The correct answer is D. Storage Blob Data Contributor for fs1. Storage Blob Data Contributor for fs1: This role grants the necessary read, write, and list permissions on fs1 only, adhering to the principle of least privilege and preventing access to fs2.
Question
You have a Microsoft Entra tenant. The tenant contains an Azure Data Lake Storage Gen2 account named storage1 that has two containers named fs1 and fs2. You have a Microsoft Entra group named DepartmentA. You need to meet the following requirements:
- DepartmentA must be able to read, write, and list all the files in
fs1.
- DepartmentA must be prevented from accessing any files in fs2.
- The solution must use the principle of least privilege.
Which role should you assign to DepartmentA?
Options
- AContributor for fs1
- BStorage Blob Data Owner for fs1
- CStorage Blob Data Contributor for storage1
- DStorage Blob Data Contributor for fs1
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C8% (2)
- D84% (21)
Explanation
Storage Blob Data Contributor for fs1: This role grants the necessary read, write, and list permissions on fs1 only, adhering to the principle of least privilege and preventing access to fs2.
Topics
Community Discussion
No community discussion yet for this question.