DP-300 Certification Practice Question #106

Question

SIMULATION
 -

You need to create a new database role named role1 that can read the contents of the SalesLT.SalesOrderDetail table only in db1.

To complete this task, sign in to the virtual machine. You may need to use SQL Server Management Studio and the Azure portal.

Accepted Answer

To create a database-level role that can read from a specific table, you connect to database `db1` and run the `CREATE ROLE role1;` statement, followed by `GRANT SELECT ON SalesLT.SalesOrderDetail TO role1;`. This complies with the principle of least privilege, restricting the role's permissions to just SELECT on that single table.

More DP-300 practice questions