AZ-104 Question 23
Single answerA new security consultant needs read-only access to all Azure resources in your subscriptions so they can review configurations and security settings. Which built-in Azure role should you assign to the consultant to ensure they can view resources without making any modifications?
- A
Reader
- B
Owner
- C
Contributor
- D
User Access Administrator
Show answer and explanation
Correct answer: A
Explanation
The Reader role is specifically designed to grant read-only access to Azure resources, allowing users to view and monitor configurations without being able to make any changes. This matches the requirement for a security consultant tasked with reviewing the environment.
- A. Correct.
Provides read-only access to all resources, which matches the requirement for a consultant who only needs to review resources without making changes.
- B. Incorrect.
Grants full access to all resources, including the ability to assign roles; too broad for read-only requirements.
- C. Incorrect.
Allows resource creation and modification but cannot manage role assignments; exceeds the scope of pure read-only access.
- D. Incorrect.
Enables managing access but doesn't grant view permissions across all resources inherently; not suitable for sole read access.