CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding Temporary Access in Azure: An Exam Question Walkthrough
Master the AZ-104 exam by exploring how to provide temporary access to Azure resources. We break down the question and options for clarity.
Temporary access decisions can trip up candidates. Knowing the right Azure feature to use is crucial for scenarios involving contractors or temporary roles.
The question
You are the Azure administrator for your organization and need to provide temporary access to a specific resource group for a contractor. Which Azure feature should you use to achieve this?
- A. Azure Policy
- B. Role-Based Access Control (RBAC)
- C. Azure AD Connect
- D. Managed Identities
Think before you scroll
Take a moment to consider what each option offers. Understand the purpose of the features listed and how they apply to access control. This will help you identify the best choice for granting temporary access.
The answer
The correct option is B. Role-Based Access Control (RBAC). RBAC allows you to assign specific roles to users or groups, granting them access to Azure resources for a defined period. This aligns perfectly with the scenario of giving temporary access to a contractor.
Why the other options lose
A. Azure Policy: This feature is focused on governance and compliance. It enforces rules and effects on Azure resources but does not manage user access directly. Thus, it cannot provide the temporary access needed in this case.
C. Azure AD Connect: This tool is designed for synchronizing on-premises directories with Azure Active Directory. It does not deal with role assignments or access management, making it unsuitable for granting temporary access to resources.
D. Managed Identities: This feature allows Azure services to authenticate to other services without the need for credentials. While useful for service-to-service authentication, it does not apply to user access management, and therefore does not solve our problem of providing access to a contractor.
The concept behind it
The key principle here is understanding access management in Azure. Role-Based Access Control (RBAC) is all about assigning roles based on the principle of least privilege. By doing so, you ensure that users only have access to the resources they need, and for the time they need it. This principle is essential for managing permissions effectively.
Exam trap to remember
Always remember: Use RBAC for user access management, especially when dealing with temporary roles or permissions. This will help avoid common pitfalls in the exam.