You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account. Which property of the RBAC role definition should you configure? 

Answer options:

A. NotActions []
B. DataActions []
C. AssignableScopes []
D. Actions []

D

To ˜Read a storage account`, ie. list the blobs in the storage account, you need an ˜Action` permission. To read the data in a storage account, ie. open a blob, you need a ˜DataAction` permission. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions