DP-900 · Question #14
Which storage solution supports role-based access control (RBAC) at the file and folder level?
The correct answer is B. Azure Data Lake Storage. Azure Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs). This article summarizes the basics of the access control model for Data Lake Storage Gen2. ACLs are…
Question
Options
- AAzure Disk Storage
- BAzure Data Lake Storage
- CAzure Blob storage
- DAzure Queue storage
How the community answered
(39 responses)- A3% (1)
- B95% (37)
- C3% (1)
Explanation
Azure Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs). This article summarizes the basics of the access control model for Data Lake Storage Gen2. ACLs are applied on the file and folder level. The key thing to remember is that you are always going to need RBAC Control Plane permissions in combination with ACLs. Best practice is to assign your security principals RBAC Reader role on the Storage Account/Container level and continue with more restrictive ACLs on the file and folder level. There are two types of ACLs: Access ACLs: They control access to an object. An object can be a file or a folder. Default ACLs: These are ACLs assigned on the folder level only which get inherited as Access ACLs by the child file or folder.
Topics
Community Discussion
No community discussion yet for this question.