Role Assignment — Microsoft Azure Administrator (AZ-104) Practice Questions
Role assignment in Azure is the mechanism by which Azure Role-Based Access Control (RBAC) grants a security principal (user, group, service principal, or managed identity) specific permissions to a scope such as a management group, subscription, resource group, or individual resource. The AZ-104 exam tests your ability to assign built-in roles like Owner, Contributor, and Reader, as well as understand how role assignments are inherited down the scope hierarchy. Each assignment ties together a security principal, a role definition, and a scope, and multiple assignments are evaluated additively. Understanding how to view, create, and remove role assignments through the portal, CLI, or PowerShell is essential for the exam.
Free questions on role assignment
You are using Azure AD B2B to collaborate with external partners. An external user cannot access a resource. Where should you check permissions?
Free question · medium · full answer + explanation
You have a subscription with multiple resource groups. You need to apply the same RBAC role to users across all resource groups. What is the most efficient approach?
Free question · medium · full answer + explanation
More role assignment questions in the full bank
- You need to assign a role to a service principal in Azure. Which PowerShell cmdlet should you use? Unlock answer & explanation →
- How do you grant a user RBAC permissions? Unlock answer & explanation →