Skill 1.2 - Manage Role-Based Access Control (RBAC)
16 Questions
3 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is RBAC?

Role-based access control

Who can RBAC access be granted to?

Users, groups, service principals, and managed identities

What is the scope of Azure RBAC?

Azure Resource Manager (ARM) deployment model

What is a role in RBAC?

<p>Definition of allowed and/or denied actions</p> Signup and view all the answers

How is RBAC configured?

<p>By selecting a role and associating it with a security principal</p> Signup and view all the answers

What takes precedence in RBAC when there are overlapping assignments?

<p>Most privileged access right</p> Signup and view all the answers

What do RBAC role definitions contain?

<p>List of permissions or declared permissions</p> Signup and view all the answers

What is the purpose of Azure AD administrative roles?

<p>To allow or restrict admins to perform identity tasks</p> Signup and view all the answers

What is the limit of custom roles per directory?

<p>5,000</p> Signup and view all the answers

Who can create or remove role assignments in Azure?

<p>People with Owner or User Access Administrator built-in roles</p> Signup and view all the answers

How can custom roles be created?

<p>From existing built-in roles, starting from scratch, or with a JSON file</p> Signup and view all the answers

What is required to create a custom role?

<p>Write permissions on all items in a scope</p> Signup and view all the answers

How can Deny Assignments be controlled?

<p>By applying a resource lock for resources created through Azure Blueprints</p> Signup and view all the answers

What is a Security Principal in Azure?

<p>An identity that gets permissions</p> Signup and view all the answers

In what ways can Role Assignments be created and listed?

<p>Portal, Azure AD PowerShell, or Microsoft Graph API</p> Signup and view all the answers

Why would someone clone a built-in role?

<p>To make small tweaks to permissions</p> Signup and view all the answers

More Like This

Use Quizgecko on...
Browser
Browser