A new team member needs a governance role assigned. What should determine which one they receive?
Select an answer to reveal the explanation.
Short Explanation
Start with what the person is actually responsible for doing, then grant only what that requires. That’s least privilege in governance role assignment.
Full Explanation
Role assignment should follow directly from the responsibilities a person holds, with access scoped to the minimum those responsibilities need. The option that bases the role on the specific responsibilities the person will hold in the governance process, mapped to the minimum access those responsibilities require, is correct. Copying whichever role template was used for the last hire, applied without modification, is incorrect because it ignores whether this person's responsibilities actually match. Granting the broadest role available so the person never needs a follow-up access request is incorrect because it defeats least privilege for the sake of convenience. Letting the team member's preference decide, since self-selection is faster to administer, is incorrect because self-selected access bypasses the responsibility-based reasoning the principle requires. For the exam, always trace a role assignment back to concrete responsibilities, not convenience or precedent.