Microsoft Azure Architect Design (AZ-304) Practice Test

In Azure, what is the primary benefit of using role-based access control (RBAC)?

1. To manage Azure resources and policies

2. To enhance security by specifying user permissions

3. To automate resource scaling based on usage

4. To simplify resource management across subscriptions

The correct answer is: To enhance security by specifying user permissions

The primary benefit of using role-based access control (RBAC) in Azure is to enhance security by specifying user permissions. RBAC allows an organization to define roles and assign them to users, groups, or service principals, thereby controlling what actions they can perform on Azure resources. This level of granularity is crucial for ensuring that individuals have only the permissions necessary for their role, which minimizes the risk of unauthorized access or actions being taken on resources. By implementing RBAC, organizations can tailor access and control mechanisms according to individual job functions, thereby following the principle of least privilege. This not only improves security but also helps in compliance and governance by ensuring that only the right individuals can access sensitive data or perform critical actions. While managing Azure resources and policies, automating resource scaling, and simplifying resource management across subscriptions are important aspects of Azure governance and efficiency, they do not directly embody the central purpose of RBAC. RBAC specifically targets security and permission management, which is why enhancing security through precise user permissions is considered its primary benefit.