To allow deployment to Development and Test workspaces only, which access should be granted to those workspaces?

To allow deployment to Development and Test workspaces only, which access should be granted to those workspaces?

• A. Viewer access to Development and Test workspaces
• B. Admin access to the deployment pipeline
• C. Contributor access to Development and Test workspaces
• D. Viewer access to Production workspace

Answer: (C)

Deployment needs write rights inside the target environments. Viewer rights won’t allow deployment, and giving admin rights to the deployment pipeline is broader than needed and risks affecting other parts of the process. Providing Contributor access to the Development and Test workspaces gives users the ability to create, modify, and deploy assets within those environments without granting full admin control or access to Production. This aligns with least-privilege practice, enabling deployments to dev/test while keeping production separate.

Deployment needs write rights inside the target environments. Viewer rights won’t allow deployment, and giving admin rights to the deployment pipeline is broader than needed and risks affecting other parts of the process. Providing Contributor access to the Development and Test workspaces gives users the ability to create, modify, and deploy assets within those environments without granting full admin control or access to Production. This aligns with least-privilege practice, enabling deployments to dev/test while keeping production separate.