How should you complete the JSON definition?

Posted by: Pdfprep Category: AZ-103 Tags: , ,

HOTSPOT

You plan to create a new Azure Active Directory (Azure AD) role.

You need to ensure that the new role can view all the resources in the Azure subscription and issue support requests to Microsoft. The solution must use the principle of least privilege.

How should you complete the JSON definition? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

Box 1: "*/read", */read lets you view everything, but not make any changes.

Box 2: " Microsoft.Support/*" The action Microsoft.Support/* enables creating and management of support tickets.

References: https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles