Learn how to generate a report of the role assignments for the last week in Azure and why the Activity log is the best source of information.
Table of Contents
Question
Suppose an administrator needs to generate a report of the role assignments for the last week. Where in the Azure portal would they generate that report?
A. Search for Activity log and filter on the Create role assignment (roleAssignments) operation.
B. At the appropriate scope, go to Access control (IAM) > Download role assignments.
C. At the appropriate scope, go to Access control (IAM) > Role assignments.
Answer
A. Search for Activity log and filter on the Create role assignment (roleAssignments) operation.
Explanation
In the Activity log, filter on the Operation name field to find role assignments.
The Activity log is a platform log that records all write operations (PUT, POST, DELETE) performed on the resources in the Azure subscription. It can be used to audit the changes made to the resources or services.
The Create role assignment (roleAssignments) operation is the action that occurs when a role is assigned to a user, group, or service principal in Azure RBAC. It can be used to track the role assignments that were created in the last week.
To generate a report of the role assignments for the last week, the administrator can search for Activity log in the Azure portal and filter on the Create role assignment (roleAssignments) operation and the time range of the last week. The administrator can also export the filtered results to a CSV or JSON file.
B is incorrect because downloading role assignments gives you a file with a list of the current role assignments.
C is incorrect the Role assignments page lists the current role assignments.
Microsoft Azure Administrator AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure Administrator AZ-104 exam and earn Microsoft Azure Administrator AZ-104 certification.