Refer to the exhibit. Anypoint Platform supports role-based access control (RBAC) to features of the platform. An organization has configured an external Identity
Provider for identity management with Anypoint Platform.
What aspects of RBAC must ALWAYS be controlled from the Anypoint Platform control plane and CANNOT be controlled via the external Identity Provider?
Assigning Anypoint Platform permissions to a role must always be controlled from the Anypoint Platform control plane. While an external Identity Provider can manage user identities and roles, the specific permissions tied to those roles within Anypoint Platform need to be configured and controlled within Anypoint itself. This ensures that the platform's security and operational policies are adhered to, regardless of how external identities are managed.
A. Roles to user can be automatically assigned by the IdP roles mapping configuration.
A. Assigning Anypoint Platform permissions to a role
Role permissions are always enforced in Anypoint Platform. Business groups concentrate resource access, so there’s no relation to IdP, that manages identify. User roles and access can be managed by external IdP.
Assigning platform-specific permissions to a role in Anypoint Platform typically involves configuring those permissions within Anypoint Platform itself. While Anypoint Platform can integrate with external identity providers and RBAC systems for user authentication and role assignment, the assignment of platform-specific permissions is usually managed within Anypoint Platform.
Confusing question again. C or A, one of it can be the right answer.
It should be B as role will be define under platform like support, developer or admin