Which condition can be attached to a role assignment for finer control, such as restricting access to blobs with a specific tag?
- A Azure ABAC condition expressions (correct answer)
- B A NSG rule
- C A deny assignment
- D A resource lock
Shortcut: Attribute-based access control adds condition expressions to eligible data-plane role assignments, allowing rules based on resource attributes such as blob index tags.