az-104 Practice Question 721
Exam: az-104
Domain: Describe Azure architecture and services
Topic: Describe Azure identity, access, and security
Difficulty: medium
You have an Azure subscription that contains a user named User1.\nYou need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege.\nWhich role-based access control (RBAC) role should you assign to User1?
Answer Options
A
Owner
B
Virtual Machine Contributor
C
Contributor
D
Virtual Machine Administrator Login
Correct Answer
C: Contributor
Explanation
Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC\nIncorrect Answers:\nA: Owner: Grants full access to manage all resources, including the ability to assign roles in Azure RBAC.\nB: Virtual Machine Contributor: Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to.\nD: Virtual Machine Administrator Login: View Virtual Machines in the portal and login as administrator.