Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which Azure service enables fine-grained access management?

1. Locks

2. Policy

3. Initiatives

4. Role-based Access Control

The correct answer is: Role-based Access Control

The correct answer is indeed Role-based Access Control (RBAC). This service is designed specifically to provide detailed and precise access management within Azure resources. RBAC allows administrators to assign roles to users or groups at a specific scope, such as a subscription, resource group, or individual resource. This means that organizations can enforce the principle of least privilege by ensuring that users only have the access necessary for their job functions, thereby enhancing security. In contrast, other choices offer broader governance features. For example, locks are used to prevent accidental deletion or modification of resources, while policies define rules and effects for resources, helping to enforce compliance but not directly managing access at an individual user level. Initiatives are collections of related policies grouped together for better management and reporting rather than specific access rights. Therefore, RBAC stands out as the most effective service for achieving fine-grained access management in Azure.