The AI-102 exam has been retired
It was retired on June 30, 2026. It was replaced by AI-103 (Microsoft Azure AI Apps and Agents Developer Associate). Go to the AI-103 study guide →
Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
2.3.2. RBAC and Access Control
RBAC (Role-Based Access Control) controls what authenticated users can do after they've proven who they are. Following the principle of least privilege—assigning only the minimum permissions needed—reduces the blast radius if credentials are compromised.
What breaks without proper RBAC: A compromised credential with Owner permissions can delete resources, exfiltrate data, and rack up charges. With Cognitive Services User, the same compromise only allows API calls—still bad, but contained.
Key roles tested on the exam:
Required RBAC Roles:
Cognitive Services User— Call APIsCognitive Services Contributor— Manage resources
Enroll to unlock the 7 practice questions written for this section, so you can test what you just read while it is fresh.
Enroll to unlock the 2 flashcards for this section and review them on a spaced-repetition schedule.
Written byAlvin Varughese
Founder•18 professional certifications