AZ-104 Certification Notes

Chapter 2.10 - Assign Access Rights

Azure AD - Assign Access Rights

There are four ways to assign resource access rights to your users:

• Direct assignment
  • The resource owner directly assigns the user to the resource
• Group assignment
  • The resource owner assigns an Azure AD group to the resource, which automatically gives all of the group members access to the resource
• Rule-based assignment
  • The resource owner creates a group and uses a rule to define which users are assigned to a specific resource
• External authority assignment
  • Access comes from an external source, such as an on-premises directory or a SaaS app

Practice Quiz

• Which assign resource access rights method defines when the resource owner assigns an Azure AD group to the resource, which automatically gives all of the group members access to the resource?

  • External authority assignment
  • Rule-based assignment
  • Direct assignment
  • Group assignment

• Which assign resource access rights method comes from an external source, such as an on-premises directory or a SaaS app?

  • External authority assignment
  • Group assignment
  • Direct assignment
  • Rule-based assignment

• What is Direct assignment (Assign Access Rights)?

  • The method where the resource owner directly assigns the user to the resource.​