From 9dde5b185c5989ace2d4e18b7dc2b10ffff8e664 Mon Sep 17 00:00:00 2001 From: staleycyn <45440075+staleycyn@users.noreply.github.com> Date: Thu, 25 Jan 2024 07:32:32 -0800 Subject: [PATCH] Update LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md --- .../Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md index d01d91e9..1bb3601f 100644 --- a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md +++ b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md @@ -40,11 +40,11 @@ There are some interactive lab simulations that you might find useful for this t ![Diagram of lab tasks.](../media/az104-lab02a-architecture.png) -## Tasks +## Job skills + Task 1: Implement management groups. + Task 2: Review and assign a built-in Azure role. -+ Task 3: Create a custom RBAC role for the Help Desk personnel. ++ Task 3: Create a custom RBAC role. + Task 4: Monitor role assignments with the Activity Log. ## Task 1: Implement Management Groups @@ -102,7 +102,7 @@ In this task, you will review the built-in roles and assign the VM Contributor r >**Did you know?** This assignment might not actually grant you any additional privileges. If you already have the Owner role, that role includes all permissions associated with the VM Contributor role. -## Task 3: Create a custom RBAC role for the Help Desk personnel +## Task 3: Create a custom RBAC role In this task, you will create a custom RBAC role. Custom roles are a core part of implementing the principle of least privilege for an environment. Built-in roles might have too many permissions for your scenario. In this task we will create a new role and remove permissions that are not be necessary.