Hotspot Question You have an Azure subscription that contains two resource groups named RG1 and RG2, a storage account named storage1. You assign roles for the subscription as shown in the following…

Question

Exhibit

Answer Area

• User1 can read the data stored in storage1.Yes
• User2 can create a virtual network in RG2.No
• User3 can assign roles for storage1.Yes

Explanation

User1 has the Storage Blob Data Reader role assigned at the storage1 level, which grants read access to blob data within storage1, making statement 1 'Yes' correct. User2 only has the Reader role at the subscription level and no additional roles for RG2 or its resources; the Reader role is read-only and does not permit creating resources like virtual networks, making statement 2 'No' correct. User3 has the Owner role assigned at the storage1 level, which includes the ability to manage access (assign roles) for that specific resource, making statement 3 'Yes' correct. Azure RBAC is additive and roles assigned at lower scopes (like storage1) take effect alongside inherited roles from parent scopes.

No community discussion yet for this question.