az-104 Practice Question 796
Exam: az-104
Domain: Describe Azure architecture and services
Topic: Describe Azure identity, access, and security
Difficulty: medium
You have two Azure subscriptions named Sub1 and Sub2.
An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.
You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.
What should you do?
Answer Options
A
Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.
B
Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1.
C
Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.
D
Select the custom role and add Sub1 to the assignable scopes. Remove RG1 from the assignable scopes. Create a new custom role for Sub2.
Correct Answer
A: Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.
Explanation
Can be used as:
"AssignableScopes": [
"/subscriptions/{Sub1}",
"/subscriptions/{Sub2}",
Note: Custom role example:
The following shows what a custom role looks like as displayed using Azure PowerShell in JSON format. This custom role can be used for monitoring and restarting virtual machines.