Planning and Administering Microsoft Azure for SAP Workloads — Question 54

You have an SAP workload on an Azure virtual machine.

You have a built-in role-based access control (RBAC) role definition in the JSON format.

You plan to change the built-in role definition to a custom role definition.

Which property value in the built-in role definition must you change?

Answer options

• A. assignableScopes
• B. notActions
• C. roleName
• D. actions

Correct answer: D

Explanation

The correct answer is D because the 'actions' property defines the permissions associated with a role, and these need to be customized when creating a new role definition. The other properties, such as 'assignableScopes', 'notActions', and 'roleName', do not directly define the permissions and thus do not need to be changed for the purpose of customizing the role.