Microsoft Azure Architect Design (AZ-304) Practice Test

What Azure subscription feature allows specific users or groups to assign roles within the subscription?

1. User Access Administrator

2. Resource Manager

3. Role-Based Access Control (RBAC)

4. Subscription Owner

The correct answer is: Role-Based Access Control (RBAC)

The correct choice highlights the functionality of Role-Based Access Control (RBAC) within Azure subscriptions. RBAC is a critical feature that enables precise management of access rights by allowing specific users or groups to be granted permission to assign roles. This granular control over who can manage and assign roles ensures that access to resources is secured, tailored, and compliant with the organization's security policies. This feature allows different levels of access to be defined—such as contributor or reader roles—depending on the needs of users or groups within an organization. By implementing RBAC, administrators can delegate permissions effectively, promote least privilege access, and enhance overall governance in managing Azure resources. While the User Access Administrator role can assign RBAC roles, it is a specific role rather than the overarching concept. Resource Manager is the service used for managing resources in Azure, but it does not directly assign capabilities regarding user roles. The Subscription Owner role possesses extensive permissions but does not encompass the broader capabilities that RBAC offers in terms of managing and defining access at a detailed level.