Q13 RBAC Domain 4 · 20–25% of exam

A DevOps engineer needs to read but not modify Kubernetes objects in a specific namespace of an AKS cluster using Azure RBAC. Which role is appropriate?

  1. A Azure Kubernetes Service RBAC Cluster Admin
  2. B Azure Kubernetes Service RBAC Admin
  3. C Azure Kubernetes Service RBAC Reader (correct answer)
  4. D Contributor

Shortcut: Azure Kubernetes Service RBAC Reader grants read-only access to Kubernetes objects within the assigned scope (can be limited to a specific namespace), without the ability to modify resources.