AZ-303 Exam QuestionsBrowse all questions from this exam
Go to Exam

AZ-303 Exam - Question 277

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named

Developers. Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Contributor role to the Developers group.

Does this meet the goal?

Show Answer
Correct Answer: A

The Contributor role allows members to manage everything except granting access to other users. This includes the ability to create and manage resources of all types within the resource group, such as Azure logic apps. Therefore, assigning the Contributor role to the Developers group in the Dev resource group meets the goal of providing them the ability to create Azure logic apps.

Discussion

5 comments
Sign in to comment
Tripp_F
Jul 6, 2021

Yes, Contributor will work, though this is not the path of least privilege. Logic App Contributor would be the best way to go if this was the only privilege needed (was incorrect in a previous question) - Logic App Operator would NOT work.

Yiannisthe7th
Jul 3, 2021

YES Contributor Create and manage all of types of Azure resources Create a new tenant in Azure Active Directory Cannot grant access to others

rdemontis
Jul 14, 2021

correct

syu31svc
Aug 28, 2021

Answer is yes as Contributor role lets you manage everything except granting access to resources. It allows you to create and manage resources of all types, including creating Azure logic apps.

Kikota12
Oct 5, 2021

No mention of least privilege so it works