Microsoft Security Operations Analyst — Question 50
You have an Azure subscription that contains a resource group named RG1. RG1 contains a Microsoft Sentinel workspace. The subscription is linked to a Microsoft Entra tenant that contains a user named User1.
You need to ensure that User1 can deploy and customize Microsoft Sentinel workbook templates. The solution must follow the principle of least privilege.
Which role should you assign to User1 for RG1?
Answer options
- A. Microsoft Sentinel Contributor
- B. Workbook Contributor
- C. Microsoft Sentinel Automation Contributor
- D. Contributor
Correct answer: B
Explanation
Assigning the Workbook Contributor role to User1 allows them to specifically manage workbook templates within Microsoft Sentinel, which is the required action. Other roles, like Microsoft Sentinel Contributor and Contributor, provide broader permissions that exceed the least privilege requirement, while Microsoft Sentinel Automation Contributor is not relevant for customizing workbook templates.