Question
What is the scope hierarchy for RBAC?
Click to reveal answer
Answer
Management Group → Subscription → Resource Group → Resource. Permissions are inherited downward.
Click to flip back
All Identity & Governance Flashcards
Q: What is the scope hierarchy for RBAC?
A: Management Group → Subscription → Resource Group → Resource. Permissions are inherited downward.
Q: What is an Administrative Unit?
A: A container in Entra ID that restricts administrative permissions to a defined subset of users, groups, or devices.
Q: What is the difference between Azure Policy and RBAC?
A: Azure Policy enforces rules on resource properties. RBAC controls who can perform actions on resources.
Q: What does a Delete lock do?
A: Prevents deletion of a resource but allows reading and modification.
Q: How do you enforce tag inheritance?
A: Use Azure Policy with the "Inherit a tag from the resource group" effect.