💼 Azure Interview Questions

Azure Interview Questions: 🎬 Interview Scenario: How Much Access Do You Give a QA Pipeline? What Is Actually Needed?

🎬 Interview Scenario: How Much Access Do You Give a QA Pipeline?

What Is Actually Needed?

Contributor on One Resource Group

Secure, Narrow-Scoped Pipeline

Interview question: "A QA pipeline needs to create test VMs — what RBAC role do you grant?"

Easy answer: assign the Owner role at the subscription level, everything works. But that's the WRONG answer — Owner also grants the power to delete resources and change permissions.

The right question: what does the pipeline ACTUALLY do? It only creates VMs in ONE resource group — it never touches the rest of the subscription.

The Contributor role gets assigned ONLY on the qa-rg resource group — no access to production resources whatsoever.

Final — the pipeline still works, but even if the Service Principal's credentials are stolen, an attacker can only touch qa-rg. Interview lesson: least privilege isn't "just make it work", it's "grant only what's needed".

Answering "Why Did You Use Azure?" in an Interview

Don't just say "Azure DevOps is powerful"…

Don't just say "Azure DevOps is powerful" — make concrete WHICH component you chose, for WHICH problem.

Describe an integration decision…

Describe an integration decision: "We already used Active Directory, so instead of standing up a separate identity system we used Azure AD."