AZ-305 practice test Set 1 – question number 7

[juano1985]

Hi,

I understand that Azure RBAC permissions are inherited, not for applications or shared resources, but in this case it’s the user trying to create a storage account which it’s parent group has Contributor access at the tenant root group level. In this case I think User1 is able to deploy a storage account in RG2 (I didn’t find any official MS documentation to back it, but I do find some sites that do say this is right and even another set of practice tests on Udemy that has the exact same question but the answer is yes (please see attached question from a set of Udemy tests and the explanation of the instructor there)… so I am a bit confused now of how this works and what should be the correct answer, what do you think?:

https://stackoverflow.com/questions/68825745/how-nested-can-rbac-roles-be-in-azure-specifically-a-storage-account-using-adls

Let me know which answer is the correct one or if I am misinterpreting something from either question that leads to different answers on each scenario.

Thanks!
Juan