SC-200 · Question #332
You have an Azure subscription that contains a resource group named RG1. RG1 contains a Microsoft Sentinel workspace. The subscription is linked to a Microsoft Entra tenant that contains a user…
The correct answer is B. Workbook Contributor. To grant User1 the minimum necessary permissions to deploy and customize Microsoft Sentinel workbook templates in RG1, assign the Workbook Contributor role.
Question
You have an Azure subscription that contains a resource group named RG1. RG1 contains a Microsoft Sentinel workspace. The subscription is linked to a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can deploy and customize Microsoft Sentinel workbook templates. The solution must follow the principle of least privilege. Which role should you assign to User1 for RG1?
Options
- AMicrosoft Sentinel Contributor
- BWorkbook Contributor
- CMicrosoft Sentinel Automation Contributor
- DContributor
How the community answered
(41 responses)- A2% (1)
- B80% (33)
- C12% (5)
- D5% (2)
Why each option
To grant User1 the minimum necessary permissions to deploy and customize Microsoft Sentinel workbook templates in RG1, assign the Workbook Contributor role.
Microsoft Sentinel Contributor has broader permissions for managing Microsoft Sentinel resources, including data connectors and analytics rules, which exceeds the scope of only managing workbooks.
The Workbook Contributor role specifically provides permissions to create, edit, save, and delete workbooks, which directly addresses the requirement to deploy and customize Microsoft Sentinel workbook templates while adhering to the principle of least privilege.
Microsoft Sentinel Automation Contributor is designed for managing automation rules and playbooks, not for the deployment and customization of workbook templates.
The Contributor role grants full management access to all resources within the resource group, which violates the principle of least privilege for the specific task of managing workbook templates.
Concept tested: Azure RBAC for Microsoft Sentinel workbooks
Source: learn.microsoft.com/azure/sentinel/roles
Community Discussion
No community discussion yet for this question.