Learn how to check access for a user to a resource group in Azure and why the Check Access feature on the Access control (IAM) page is the best option.
Table of Contents
Question
Suppose a team member can’t view resources in a resource group. Where would the administrator go to check the team member’s access?
A. Check the team member’s permissions by going to their Azure profile > My permissions.
B. Go to the resource group and select Access control (IAM) > Check Access.
C. Go to one of the resources in the resource group and select Role assignments.
Answer
B. Go to the resource group and select Access control (IAM) > Check Access.
Explanation
Find the list of role of assignments on the resource group.
The Check Access feature on the Access control (IAM) page allows the administrator to list the role assignments for a single user, group, service principal, or managed identity at a specific scope. The scope can be a management group, subscription, resource group, or resource.
A is incorrect because the Azure profile permissions show permissions at the subscription scope. But an administrator could view the list of assigned roles on the user profile in Active Directory.
C is incorrect because the resource inherits permissions from the resource group so you could see their access to the specific resource. But you should go to the resource group to view and manage permissions at that scope.
Microsoft Azure Administrator AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure Administrator AZ-104 exam and earn Microsoft Azure Administrator AZ-104 certification.