Microsoft Azure Administrator Associate AZ-104 Practice Question
An Azure administrator named Jordan has been assigned the Storage Account Contributor role at the subscription scope. Jordan attempts to create a new storage account in the FinanceRG resource group but receives an authorization failure. You confirm that FinanceRG has no resource locks and no Azure Policy assignments that deny storage account creation. What could explain why Jordan still cannot create the storage account?
Jordan is a member of a group that has a deny assignment at the FinanceRG scope blocking storage-account creation.
The Storage Account Contributor role does not include permissions to create storage accounts.
Jordan lacks the Storage Account Contributor role at the FinanceRG resource-group scope.
The Microsoft.Storage resource provider is not registered in the subscription.
A deny assignment evaluated at the FinanceRG scope can explicitly block the Microsoft.Storage/storageAccounts/write action. Because deny assignments take precedence over allow role assignments, membership in a security principal that is subject to such a deny assignment prevents Jordan from creating the storage account even though the Storage Account Contributor role is inherited from the subscription. The role is still inherited to the resource group, the built-in role does allow creation, and a missing resource-provider registration would surface a different error rather than an RBAC denial.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a 'deny assignment' in Azure?
Open an interactive chat with Bash
How do role assignments and deny assignments interact in Azure?
Open an interactive chat with Bash
How can you check if a deny assignment is affecting a user's permissions in Azure?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .