An access package must ultimately allow a partner to use an Azure resource. The resource already authorizes a security group. What should the architect recommend?

Choose the single best answer.

A.Assume every Azure permission is directly packaged as a standalone entitlement object.
B.Package supported group membership and verify that the group's actual resource authorization grants the required access.
C.Ignore resource roles because package approval automatically grants every resource operation.
D.Use expiry only on the partner's email address and retain all resource grants.

Show the answer and explanation

✓ Correct answer

Package supported group membership and verify that the group's actual resource authorization grants the required access.

Supported group membership can provide the indirect authorization path to a resource already using that group, but its role and effective access must be verified. Access packages do not directly package every possible Azure permission or automatically override resource authorization. Expiry must apply to actual access. Source: AZ-305 Study Guide.pdf, PDF page(s) 21.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.