You have an Azure Storage account named storage1 that hosts a blob container named container1.

Microsoft SC-500 Question Answer

You have an Azure Functions app named app1 that uses a managed identity.

You need to configure app1 to read, write, and delete blobs in container1. The solution must follow the principle of least privilege.

What should you do?

Assign the Storage Account Contributor role to the managed identity of app1 at the scope of storage1.

Assign the Storage Blob Delegator role to the managed identity of app1 at the scope of container1.

Assign the Owner role to the managed identity of app1 at the scope of container1.

Assign the Storage Blob Data Contributor role to the managed identity of app1 at the scope of container1.

SC-500 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"