Your organization wants to implement 'Attribute-based Access Control' (ABAC) in Azure to simplify permission management. They want to ensure that developers can only start/stop virtual machines that have a 'ProjectID' tag matching the 'ProjectID' tag on the developer's Entra ID user profile. Which Azure feature enables this dynamic comparison?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Azure RBAC with 'Role Assignment Conditions'

RBAC conditions allow you to write expressions in role assignments that compare principal attributes (tags/claims) to resource attributes, enabling ABAC....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

Your organization wants to implement 'Attribute-based Access Control' (ABAC) in Azure to simplify permission management. They want to ensure that developers can only start/stop virtual machines that have a 'ProjectID' tag matching the 'ProjectID' tag on the developer's Entra ID user profile. Which Azure feature enables this dynamic comparison?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Azure RBAC with 'Role Assignment Conditions'

Why This Answer Is Correct

RBAC conditions allow you to write expressions in role assignments that compare principal attributes (tags/claims) to resource attributes, enabling ABAC.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.