Exam: AZ-900: Microsoft Azure Fundamentals 0 Likes
A set of IAM permissions have been assigned to a resource group... (AZ-900)
A set of IAM permissions have been assigned to a resource group.
Would the resources in the resource group automatically inherit the IAM permissions assigned to the resource group?
A) Yes.
B) No.
Solution
Correct answer: A) Yes.
IAM (Identity and Access Management) permissions assigned to a resource group in Azure are not automatically inherited by the resources within that resource group. IAM permissions are applied at the resource level, not the resource group level.
When you assign IAM permissions to a resource group, those permissions apply to the resource group itself, not to the individual resources within it. The resources in the resource group do not automatically inherit the IAM permissions of the resource group.
To control access to specific resources within a resource group, you need to assign IAM permissions directly to those resources. This allows for more granular control over who can perform actions on each resource. Keep in mind that resource-level IAM permissions are independent of resource group-level permissions.
In summary, while IAM permissions at the resource group level apply to the resource group itself, they do not automatically extend to the individual resources within the group. Permissions for each resource need to be managed separately at the resource level.
Category: Azure management and governance