Microsoft · AZ-400
Authentication and permissions
AZ-400 · Lesson 13 of 15 · 1:19:01
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-400 exam (Microsoft Certified: DevOps Engineer Expert). In this lesson: service principals and managed identities, the GITHUB_TOKEN, GitHub Apps, and personal access tokens, Azure DevOps service connections with workload identity federation, access levels, and roles and security groups. Includes three original practice questions.
Preview the topics
- A workflow step must comment on the pull request that triggered it, with no stored secret and no extra setup. What should it use?
- A pipeline in Azure DevOps must deploy to Azure, and the security team forbids storing any secret for it. What should the service connection use?
- A product manager must view and update work items in Azure Boards, at no license cost, without needing the code. Which access level fits?