AZ104-Q: grant one team access to one project
Developers need to manage resources only in
rg-app-test. Which assignment follows least privilege?
- A) Contributor at
rg-app-testfor the developers’ group. ✓ - B) Owner at the management-group scope.
- C) Global Administrator in Entra ID.
- D) Reader at the subscription scope. Answer: A. The role and resource-group scope match the stated management need without extending to other projects. Why not the others: The other choices are either excessive or insufficient.
Related
rbac · scope · resource-group