HOTSPOT -
You are developing the shopping on-the-go project.
You are configuring access to the QnA Maker (classic) resources.
Which role should you assign to AllUsers and LeadershipTeam? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 1: QnA Maker Editor -
Scenario: Provide all employees with the ability to edit Q&As.
The QnA Maker Editor (read/write) has the following permissions:
✑ Create KB API
✑ Update KB API
✑ Replace KB API
✑ Replace Alterations
✑ "Train API" [in new service model v5]
Box 2: Contributor -
Scenario: Only senior managers must be able to publish updates.
Contributor permission: All except ability to add new members to roles
Reference:
https://docs.microsoft.com/en-us/azure/cognitive-services/qnamaker/reference-role-based-access-control
How about Cognitive Service User? the link explicitly says publish is given to this role. https://docs.microsoft.com/en-us/azure/cognitive-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role
I agree it is: Cognitive Service Userm Contributor can also create new resources
Agreed, from a least privilege principle perspective, it should be Cognitive Service User.
The Owner role would give the leadership team the ability to publish changes, but also the additional capability to give others access to QnA maker, which they do not require. security best practices (in case of a compromised account etc) dictate the principles of least privilege; leadership team should only be given access to the capabilities they require to do their job and nothing more. Since the problem only mentions publishing, the leadership team requires the role contributor. In other RBAC exam questions for other certs MSFT remembers to preface such a question with "bearing in mind the principle of least privilege..." but they neglected that hint here.
Should be Cognitive Service User -> All access to Cognitive Services resource except for ability to: 1. Add new members to roles. 2. Create new resources. Contributor role provides Leadership team access to create new resources. And they shouldnt be allowed to do that given that they arent technical people
agree with you
1. QnA Maker Editor 2. Cognitive Service User https://learn.microsoft.com/en-us/azure/cognitive-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role - QnA Maker Editor (read/write) - Cognitive Service User (read/write/publish)
To address the requirement: Provide all employees with the ability to edit Q&As. Only senior managers must be able to publish updates. AllUsers: QnA Maker Editor (read/write) Leadership Team: Cognitive Service User (read/write/publish) Cognitive Service User has less permissions than Contributor.
Reference: https://docs.microsoft.com/en-us/azure/cognitive-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role
on my exam. (2023-01-16 passed) My Answer: 1. QnA Maker Editor 2. Cognitive Service User
1. Cognitive Services QnA Maker Editor 2. Cognitive Services User See https://learn.microsoft.com/en-us/azure/ai-services/qnamaker/concepts/role-based-access-control#access-is-provided-by-a-defined-role
Shouldn't Leadership team have owner rights which has right to publish the updates ?
Was on exam 27/11/2021
it would be in the exam? its listed as question under ai-102. what a pointless comment to make
Pointless is your comment.
1. QnA Maker Editor 2. Cognitive Service User
Shouldn't Leadership eam have owner rights which has right to publish the updates ?
from case study: Provide all employees with the ability to edit Q&As. Only senior managers must be able to publish updates, so the given answer is correct
AllUsers: QnA Maker Editor (read/write) Leadership Team: Cognitive Service User (read/write/publish) Leadership team does not need to add resources
The leadership should have permission to publish!!! here is why AllUsers: QnA Maker Editor Leadership team: Cognitive Service User Key Differences in Privilege Scope Specificity: The QnA Maker Editor role is specific to the QnA Maker service with a focus on content editing, while the Cognitive Service User role is more general and can encompass a broader range of tasks across Azure Cognitive Services. Publishing the Knowledge Base: The ability to publish the knowledge base to make it live is a critical task. The QnA Maker Editor might have restricted access in this regard, requiring administrative approval, whereas a Cognitive Service User with the right permissions could directly publish changes.
Is this question still available on May 21, 2024?
1. QnA Maker Editor 2. Cognitive Service User
AllUsers: QnA Maker Editor LeadershipTeam: Contributor
1. QnA Maker Editor 2. Cognitive Service User