Least-privilege Azure RBAC: the narrow built-in role for Arc, File Sync and Monitor alerts
This sheet compares Azure Connected Machine Resource Administrator, Reader and Data Access, Monitoring Contributor.
| Criterion | Azure Connected Machine Resource Administrator | Reader and Data Access | Monitoring Contributor |
|---|---|---|---|
| Task it satisfies | Deploy VM extensions to Azure Arc-enabled servers | Create or update an Azure File Sync cloud endpoint | Create and manage Azure Monitor alert rules |
The verdict, the full comparison, 3 rules and 4 traps are part of AZ-802 access. Unlock AZ-802.