diff --git a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md index d01d91e9..1bb3601f 100644 --- a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md +++ b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md @@ -40,11 +40,11 @@ There are some interactive lab simulations that you might find useful for this t ![Diagram of lab tasks.](../media/az104-lab02a-architecture.png) -## Tasks +## Job skills + Task 1: Implement management groups. + Task 2: Review and assign a built-in Azure role. -+ Task 3: Create a custom RBAC role for the Help Desk personnel. ++ Task 3: Create a custom RBAC role. + Task 4: Monitor role assignments with the Activity Log. ## Task 1: Implement Management Groups @@ -102,7 +102,7 @@ In this task, you will review the built-in roles and assign the VM Contributor r >**Did you know?** This assignment might not actually grant you any additional privileges. If you already have the Owner role, that role includes all permissions associated with the VM Contributor role. -## Task 3: Create a custom RBAC role for the Help Desk personnel +## Task 3: Create a custom RBAC role In this task, you will create a custom RBAC role. Custom roles are a core part of implementing the principle of least privilege for an environment. Built-in roles might have too many permissions for your scenario. In this task we will create a new role and remove permissions that are not be necessary.