You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group

Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management....

๐Ÿ“‹Part of Microsoft Certified: Azure Data Scientist Associate (DP-100) ยท Azure Certification Practice
Real Exam ScenarioAzure Blob Storage

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

โœ“ Correct Answer & ExplanationAzure Blob Storage

Correct Answer

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group

Why This Answer Is Correct

Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Blob Storage โ€” a core concept tested in Microsoft Certified: Azure Data Scientist Associate (DP-100). Understanding Azure Blob Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.