Which property of the RBAC role definition should you configure?

You have an Azure subscription.

You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account.

Which property of the RBAC role definition should you configure?
A . NotActions []
B . DataActions []
C . AssignableScopes []
D . Actions []

View Answer

Answer: D

Explanation:

To ‘Read a storage account’, ie. list the blobs in the storage account, you need an ‘Action’ permission.

To read the data in a storage account, ie. open a blob, you need a ‘DataAction’ permission.

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions