Question:
A new web application has been deployed in a specific Azure subscription. The DevOps team will be responsible for monitoring the application and executing future deployments. You need to set up Role-Based Access Control (RBAC) for the DevOps team to allow them to view and manage deployment pipelines within the subscription. What RBAC role should you assign to the DevOps team?
Answer:
The correct option is Microsoft.DevOps/write because to manage deployment pipelines and monitor the application, the DevOps team would require write access to DevOps resources within the subscription. This role allows them to view and manage DevOps resources, including deployment pipelines.
*/write: Provides write access to all resources within the subscription, which could be overly permissive and pose a security risk.