Hotspot Question You have an on-premises server named Server1 that has Microsoft SQL Server installed. Server1 contains a database named DB1. You have an Azure subscription that contains a user…

Question

Exhibit

Answer Area

• Role:Contributor
  ContributorSQL DB ContributorSQL Server ContributorSQL Security Manager
• Resource provider:Microsoft.DataMigration
  Microsoft.DataboxMicrosoft.DataMigrationMicrosoft.Migrate

Explanation

This question tests knowledge of the minimum RBAC role required to register resource providers and create Azure Database Migration Service instances, as well as identifying the correct resource provider for database migration.

Approach. The correct role to assign User1 is Contributor at the subscription level. The Contributor role allows the user to create and manage all types of Azure resources (including Azure Database Migration Service instances) and register resource providers, without granting the ability to manage access/permissions (which would require Owner). The Owner role would violate least privilege since it also grants permission management. The correct resource provider to register is Microsoft.DataMigration, which is the Azure resource provider that enables the Azure Database Migration Service. Without registering this provider, User1 cannot create a Database Migration Service instance or perform database migrations to Azure SQL Database.

Concept tested. The question tests understanding of Azure RBAC least privilege principles (Contributor vs Owner vs Reader), the requirement to register resource providers before using certain Azure services, and the specific resource provider namespace (Microsoft.DataMigration) associated with Azure Database Migration Service.

Reference. https://docs.microsoft.com/en-us/azure/dms/quickstart-create-data-migration-service-portal and https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor

No community discussion yet for this question.