Which role grants a user only the permissions required to download images from an Azure Container Registry?
Choose an answer
Tap an option to check your answer.
Correct answer: AcrPull.
Why this is the answer
The AcrPull role grants read-only access to an Azure Container Registry, specifically allowing users to pull (download) images. This aligns with the principle of least privilege, providing only the necessary permissions. The Reader role in Azure generally provides read access to resources, but for Container Registry, AcrPull is the specific role for image download. Contributor provides broad read and write access, which is more than needed. AcrDelete allows deleting images, which is not required for downloading.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed