SC-300 Certification Practice Question #115

Question

You have an Azure subscription.

You need to create two custom roles named Role1 and Role2. The solution must meet the following requirements:

•	Users that are assigned Role1 can manage application security groups.
•	Users that are assigned Role2 can manage Azure Firewall.

Which resource provider permissions are required for each role? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Both target resources live under the same resource provider. Application security groups map to the `Microsoft.Network/applicationSecurityGroups/*` operations and Azure Firewall maps to `Microsoft.Network/azurefirewalls/*`, both enumerated on the MS Learn "Azure permissions for Networking" reference. The community is unanimous across multiple commenters (the 16-vote Highly Voted answer plus three corroborating replies) and explicitly cites the same MS Learn pages. None of the alternative providers (Microsoft.App, Microsoft.Computer, Microsoft.Management, Microsoft.Security) expose these operations, so both dropdowns resolve to Microsoft.Network.

More SC-300 practice questions