The city help desk needs to view resources in one resource group without changing them. Which Azure capability is used to grant a group the Reader role on that resource group?
Select an answer to reveal the explanation.
Short Explanation
RBAC is the permission sticky-note on Azure resources: who (principal), what they can do (role), and where (scope). Reader on a resource group is view-only for that folder of resources. Storage lifecycle and regions do not grant that kind of access.
Full Explanation
Azure RBAC grants roles to users, groups, or service principals at scopes such as management group, subscription, resource group, or resource. Assigning Reader on a resource group lets the help desk view resources there without modification rights. That authorization model is distinct from storage lifecycle policies or regional placement.