| AZ400 Certification Dump Question 31
You have an Azure DevOps organization, a project named Project1, and an Azure subscription named Sub1.
In a resource group RG1, you create an Azure Storage account named storage1.
You need to ensure that automated tests in Project1 can sign in to storage1 by using a service principal. The solution must follow the principle of least privilege.
How should you configure the access policy?
Select only one answer.
Choose the correct option from below list
(1)Assign the Contributor role to the service principal for RG1.
(2)Assign the Contributor role to the service principal for storage1.
(3)Assign the Reader role to the service principal for RG1.
(4)Assign the Reader role to the service principal for storage1.
Answer:-(2)Assign the Contributor role to the service principal for storage1. | | |