You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account...
Microsoft AZ-500 Exam
Questions Number: 93 out of 443 Questions
20.99%
Question 93
You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account. Which property of the RBAC role definition should you configure?
To 'Read a storage account', ie. list the blobs in the storage account, you need an 'Action' permission. To read the data in a storage account, ie. open a blob, you need a 'DataAction' permission. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions
