Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Required action Purpose Microsoft.Storage/storageAccounts/listkeys/action List/view Key1 and Key2 Microsoft.Storage/storageAccounts/regeneratekey/action Regenerate/rotate Key1 or Key2 The least-privilege built-in role designed for exactly this is: Storage Account Key Operator Service Role
This role allows managing encryption scopes but does not grant permissions to list and regenerate storage account keys1. To enable User1 to list and regenerate storage account keys, you should assign the Storage Account Key Operator Service Role or the Storage Account Contributor Role
The Storage Account Encryption Scope Contributor role allows a user to manage encryption scopes in a storage account but does not grant the ability to list and regenerate storage account keys. To meet the goal, you would need to assign the Storage Account Key Operator Service Role or a role with broader access such as the Storage Account Contributor role, which includes permissions to list and regenerate keys.