AZ104-Q: grant one team access to one project

Developers need to manage resources only in rg-app-test. Which assignment follows least privilege?

  • A) Contributor at rg-app-test for the developers’ group. ✓
  • B) Owner at the management-group scope.
  • C) Global Administrator in Entra ID.
  • D) Reader at the subscription scope. Answer: A. The role and resource-group scope match the stated management need without extending to other projects. Why not the others: The other choices are either excessive or insufficient.

rbac · scope · resource-group