Built-in roles (Owner, Contributor, Reader) in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main permission level of the Owner role in Azure?

The Owner role has full access to all resources, including the ability to delegate access to others.

beginner

Which Azure built-in role allows you to manage resources but not assign roles to others?

The Contributor role allows managing resources but does not allow assigning roles or managing access.

beginner

What can a Reader role do in Azure?

The Reader role can view resources but cannot make any changes or manage access.

intermediate

Why is it important to assign the Reader role instead of Contributor when only viewing access is needed?

Assigning Reader limits risk by preventing accidental changes while allowing users to see resource details.

beginner

Can the Owner role assign the Contributor role to another user?

Yes, the Owner role can assign any role, including Contributor, because it has full access and permission management.

Which Azure role can manage resources and assign roles to others?

A Owner

B Contributor

C Reader

D User Access Administrator

The Owner role has full permissions including managing resources and assigning roles.

What is the main limitation of the Contributor role compared to the Owner?

A Cannot assign roles to others

B Cannot view resources

C Cannot create resources

D Cannot delete resources

Contributors can manage resources but cannot assign roles or manage access.

Which role should you assign to someone who only needs to see resource details without making changes?

A Contributor

B Reader

C Owner

D Administrator

The Reader role allows viewing resources without permission to change anything.

True or False: The Reader role can delete resources.

A True

B Only on certain resource types

C Only if granted extra permissions

D False

The Reader role cannot delete or modify resources; it is view-only.

Who can assign the Owner role to another user?

A Contributor

B Reader

C Owner

D Anyone

Only someone with Owner permissions can assign the Owner role to others.

Explain the differences between the Owner, Contributor, and Reader roles in Azure.

Think about what each role can do with resources and permissions.

Why is it a best practice to assign the least privilege role needed, such as Reader instead of Contributor?

Consider the principle of least privilege in security.