AZ305 – Nested Group Question

[ily]

Hi all, In this AZ305 Question, we have group1 which has Contributor at Tenant Root Group

That permission inherits to MG2 → Subs2 → RG2

User1 belongs to group2, which is a member of group1

Contributor allows storage account creation

It says:

“Nested groups do not primarily inherit access…”

That is false. Azure RBAC does support nested group membership normally.