AZ-104 Certification Practice Question #86

Question

You have an Azure Subscription that contains a storage account named storageacct1234 and two users named User1 and User2.
You assign User1 the roles shown in the following exhibit.

Which two actions can User1 perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

To successfully view and manage blob data inside a storage account via the Azure portal using Entra ID credentials, two assignments are required:
1. **A data-plane role**: The **Storage Blob Data Contributor** role allows User1 to perform data actions (read, write, and delete blobs). This satisfies **B** (Upload blob data) and **D** (Read/View blob data).
2. **A control-plane role**: The **Reader** role (inherited from the Resource Group) allows User1 to navigate the Azure portal and view management plane resources (such as containers and storage account settings).
User1 does not have any permissions to manage role assignments (eliminating A), modify firewalls (eliminating C), or perform data actions on file shares (eliminating E).

More AZ-104 practice questions