DP-420: Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DBDemo

By Microsoft · Question Mode

QuestionQ194

Maintain an Azure Cosmos DB solution

You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.

You need to grant a user named User1 the ability to insert items into container1 by using role-based access control (RBAC). The solution must follow the principle of least privilege.

Which role should you assign to User1?

  • A CosmosDB Operator only
  • B DocumentDB Account Contributor and Cosmos DB Built-in Data Contributor
  • C DocumentDB Account Contributor only
  • D Cosmos DB Built-in Data Contributor only
Explanation

The Cosmos DB Built-in Data Contributor role grants Azure Cosmos DB for NoSQL data-plane permissions for item operations, including creating items. CosmosDB Operator and DocumentDB Account Contributor are management-plane roles; they do not grant the necessary data-plane permission to insert items. Assigning only the data contributor role satisfies the required access without unnecessary account-management permissions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!