How should you configure the environment?

HOTSPOT

You are an Azure subscription administrator for your company.

Management asks you to add a contractor named User1 with a Microsoft account of [email protected] to manage DNS records but have no other permissions. The contractor is not in your Azure Active Directory (Azure AD) but must be able to manage all of the DNS records in the Adatum zone. The Adatum zone is in the ITManaged Resource Group.

You need to add the contractor.

How should you configure the environment? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box 1: DNS Zone Contributor

The ‘DNS Zone Contributor’ role is a built-in role provided by Azure for managing DNS resources. Assigning DNS Zone Contributor permissions to a user or group enables that group to manage DNS resources, but not resources of any other type.

Box 2: Add [email protected]

The simplest way to assign RBAC permissions is via the Azure portal. Open the ‘Access control (IAM)’ blade for the resource group, then click ‘Add’, then select the ‘DNS Zone Contributor’ role and select the required users or groups to grant permissions.

You can search the directory with display names, email addresses, and object identifiers.

Explanation: https://docs.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets