An Azure subscription has the Owner role assigned to a security group. A new user is added to the group. When do they gain the Owner permissions?
- A Within 24 hours
- B Immediately (group membership changes propagate to RBAC in seconds) (correct answer)
- C At next sign-in only
- D After an admin approves
Shortcut: RBAC evaluates group membership at runtime. When a user is added to a group that has a role assignment, the permissions are effective immediately on the user's next token issuance (typically within minutes).