QuestionQ17

Secure identity and access

You must evaluate the underlined segment to determine whether it is correct.

You have been assigned to create a separate subscription for every division in your company. However, all subscriptions will be associated with one Azure Active Directory (Azure AD) tenant.

You need to ensure that every subscription has the same role assignments.

You use Azure AD Privileged Identity Management (PIM).

Select No adjustment required if the underlined segment is correct. If it is incorrect, select the correct option.

Explanation

Azure AD Privileged Identity Management provides eligible and time-bound Azure RBAC role assignments, whereas Azure Blueprints supports role-assignment artifacts that can be applied to subscriptions to standardize access assignments.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!