Scribd Logo
Upload

Welcome to Scribd!

  • 51aab46cefacf98790f3fb8063cd1f10

    Uploaded by

    Aathithya Mahendranath
    124 views1 page
    The network contains an on-premises Active Directory domain and an Azure Active Directory domain. The organization uses RBAC policies to control access to Azure resources and the user is a global administrator. A team member named Mary needs the ability to create and manage objects in the subscription but not modify role assignments. The best option is to create a custom RBAC role for Mary with the required permissions.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The network contains an on-premises Active Directory domain and an Azure Active Directory domain. The organization uses RBAC policies to control access to Azure resources and the user is a global administrator. A team member named Mary needs the ability to create and manage objects in the subscription but not modify role assignments. The best option is to create a custom RBAC role for Mary with the required permissions.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    124 views1 page

    51aab46cefacf98790f3fb8063cd1f10

    Uploaded by

    Aathithya Mahendranath
    The network contains an on-premises Active Directory domain and an Azure Active Directory domain. The organization uses RBAC policies to control access to Azure resources and the user is a global administrator. A team member named Mary needs the ability to create and manage objects in the subscription but not modify role assignments. The best option is to create a custom RBAC role for Mary with the required permissions.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    Your network contains an active directory domain services(AD DS) domain named contoso.

    com
    and an Azure Active Directory(Azure AD) domain named contoso.onmicrosoft.com. you are
    using role based Access Control(RBAC) policies to control who has rights within the azure
    subscription.You are a global administrator,and have the "owner" built-in role. A member of
    your team named Mary should be allowed to create and manage all objects in the
    subscription,but should not be able to add or remove role assignments. you need to give Mary
    only the rights that she needs. This must be accomplished with the least amount of
    administrative effort.what should you do?
    A. Add Mary to the Reader Role
    B. Add Mary to the Owner Role.
    C. Create a custom RBAC role for Mary.
    D. Add Mary to the contributor role correct.

    You might also like