RBAC Quiz

What you'll be asked

1. Which of the following Azure RBAC components defines the specific actions that a user can or cannot perform on a resource?
2. You need to grant a user the ability to manage virtual machines in a specific Resource Group, but they should not be able to change the permissions of that Resource Group. Which role should you assign?
3. A user is assigned the 'Reader' role at the Subscription level and the 'Contributor' role at the Resource Group level. What is the user's effective permission on a resource inside that Resource Group?
4. You want to create a custom role that allows users to start and stop virtual machines, but prevents them from deleting the virtual machines. How should you define the 'Actions' and 'NotActions' properties?
5. A company has a complex hierarchy of Management Groups and Subscriptions. You need to apply a custom role definition that is available for assignment at any scope in the entire tenant. Where must this custom role be created?

Answers and explanations come after you submit.