AZ-204 Quiz

Managed Identities

Question:

You have assigned a user the Reader role at the subscription scope. Later, you decide to assign the same user the Contributor role at a resource group scope within that subscription. However, you want to limit their Contributor access to only certain resources within the resource group. What should you do?

Remove the Reader role at the subscription scope.
Assign the Contributor role at the subscription scope.
Assign the Reader role at the resource scope for the specific resources.
Assign the Contributor role at the resource scope for the specific resources.

Answer:

Assigning the Contributor role at the resource scope for the specific resources would limit the user's Contributor access to those resources. The other options would either broaden the user's access or limit their access too much.

Report a problem

Exam revision: April 11, 2025