Microsoft Azure Exams, Network and application protection

Exercise 1 – assigning access with RBAC – Azure Governance

Exercise 1 – assigning access with RBAC

This section will assign access to the resource group with RBAC using the Azure portal.

The following subsections cover how to complete this exercise, segregated into tasks for ease of understanding.

Task – accessing the Azure portal

  1. Log into the Azure portal at https://portal.azure.com. Alternatively, you can use the Azure desktop app: https://portal.azure.com/App/Download.

Task – creating a new resource group that requires access

  1. In the assigning with RBAC:resource group requiring access, creating” search bar, type resource groups; click Resource groups from the results list.
  2. From the Resource groups blade, click + Create via the top toolbar.
  3. From the Basics tab, set the Project and Resource details as required.
  4. Click Next: Review + create.
  5. On the Review + create tab, review your settings; you may go back to the previous tabs and make any edits if required. Once you have confirmed your settings are as required, you can click Create.
  6. You will receive a notification that the resource group was created successfully.
  7. Click Go to resource group from the Notifications blade. Alternatively, navigate to the resource group instance.

Task – assigning access to a resource group

  1. From the created Resource groups blade, click Access control (IAM) from the left-hand side menu.
  2. From the Roles tab, review the built-in roles; under the Details column, you can click on View to see the permissions that role will grant.
  3. From the Role assignments tab, review the current assignments.
  4. From the Check access tab, please review the options for My Access and Check access, and then click Add role assignment.
  5. From the Role tab, click Owner or the role you wish to assign.
  6. Click Next.
  7. For this exercise, leave Assign access to set to the default of User, Group, or Service Principal.
  8. From Members, select the members to be assigned the role.
  9. Click Next.
  10. Click Next: Review + assign.
  11. You will receive a notification that the role assignment was added.
  12. Click the Role assignments tab from the Access control (IAM) blade and review the new assignment that was created.

In this exercise, we successfully created a resource group and assigned the RBAC role to a user for access. In the following exercise, we will look at creating a custom RBAC role.