SC-300 Certification Practice Question #205

Question

You have an Azure subscription that contains a storage account named storage1 and a web app named WebApp1. WebApp1 uses a system-assigned managed identity.

You need to ensure that WebApp1 can read and write files to storage1 by using the system-assigned managed identity.

What should you configure for storage1 in the Azure portal?

Accepted Answer

To let WebApp1's system-assigned managed identity read and write to storage1, you grant the identity an Azure RBAC data role (Storage Blob Data Contributor) at the storage account, and role assignments are configured under the storage account's Access control (IAM) blade. MS Learn's "Access Azure Storage from a web app using managed identities" walkthrough states this verbatim. Suggested Answer, Most Voted, the top community comments, and MS Learn all agree with no dissent, so confidence is high at 95%.

More SC-300 practice questions