Designing and Implementing an Azure AI Solution (legacy) — Question 16

You create an Azure Cognitive Services resource.
A developer needs to be able to retrieve the keys used by the resource. The solution must use the principle of least privilege.
What is the best role to assign to the developer?

Answer options

• A. Security Manager
• B. Security Reader
• C. Cognitive Services Contributor
• D. Cognitive Services User

Correct answer: D

Explanation

The correct answer is D, Cognitive Services User, as this role allows the developer to access the keys without granting excessive permissions. Options A and B provide broader permissions that are not necessary for key retrieval, while C allows for more extensive management capabilities than required for this scenario.