Update LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md

This commit is contained in:
staleycyn 2024-01-25 07:32:32 -08:00 committed by GitHub
parent 8dcfe3dc49
commit 9dde5b185c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -40,11 +40,11 @@ There are some interactive lab simulations that you might find useful for this t
![Diagram of lab tasks.](../media/az104-lab02a-architecture.png)
## Tasks
## Job skills
+ Task 1: Implement management groups.
+ Task 2: Review and assign a built-in Azure role.
+ Task 3: Create a custom RBAC role for the Help Desk personnel.
+ Task 3: Create a custom RBAC role.
+ Task 4: Monitor role assignments with the Activity Log.
## Task 1: Implement Management Groups
@ -102,7 +102,7 @@ In this task, you will review the built-in roles and assign the VM Contributor r
>**Did you know?** This assignment might not actually grant you any additional privileges. If you already have the Owner role, that role includes all permissions associated with the VM Contributor role.
## Task 3: Create a custom RBAC role for the Help Desk personnel
## Task 3: Create a custom RBAC role
In this task, you will create a custom RBAC role. Custom roles are a core part of implementing the principle of least privilege for an environment. Built-in roles might have too many permissions for your scenario. In this task we will create a new role and remove permissions that are not be necessary.