Which statement best describes how application roles are mapped to users after being assigned to a job-specific group?

Which statement best describes how application roles are mapped to users after being assigned to a job-specific group?

• A. You map the group to users before assigning roles to the group.
• B. You map the group to unrelated applications.
• C. You map the group to users after roles are assigned to the group.
• D. You assign roles directly to each user without using groups.

Answer: (C)

In a group-based access model, roles are tied to groups and users gain those roles by being members of the group. The best approach is to assign the relevant roles to the job-specific group first, then map that group to the users who should inherit them. This ensures that any user added to the group automatically receives the correct permissions, and changes to the group’s roles propagate to all members. Mapping the group to users before the roles are assigned could leave users without the intended permissions or require backtracking, and assigning roles directly to each user defeats the benefits of group management for scalability and maintenance.

In a group-based access model, roles are tied to groups and users gain those roles by being members of the group. The best approach is to assign the relevant roles to the job-specific group first, then map that group to the users who should inherit them. This ensures that any user added to the group automatically receives the correct permissions, and changes to the group’s roles propagate to all members. Mapping the group to users before the roles are assigned could leave users without the intended permissions or require backtracking, and assigning roles directly to each user defeats the benefits of group management for scalability and maintenance.