Challenge — Least-privilege access review for the App team

تحدي — مراجعة صلاحيات بأقل امتيازات لفريق الـ App

An access review found a developer with Owner on the whole subscription and permissions granted user-by-user. Rebuild access with groups, least privilege, a custom operator role and the narrowest scopes — and leave the shared resource group completely untouched by developers.

The 4 tasks you will do

• Requirement 1 — Remove the dangerous assignmentالمتطلب 1 — شيل الـ Assignment الخطير
• Requirement 2 — Group-based developer accessالمتطلب 2 — صلاحيات الـ Developers بالجروب
• Requirement 3 — Team lead: see everything, delegate locallyالمتطلب 3 — الـ Team lead: يشوف كل حاجة ويوزّع صلاحيات محليًا
• Requirement 4 — Custom operator roleالمتطلب 4 — Custom role للتشغيل

The lesson it belongs to

• Secure your Azure resources with Azure role-based access control (Azure RBAC)