az-140 Practice Question 2031
Exam: az-140
Domain: Manage access and security
Topic: Manage RBAC and Conditional Access for AVD
Difficulty: medium
In an Azure Virtual Desktop (AVD) environment, you need to assign a user named 'John Doe' the ability to manage session hosts but not the ability to manage host pools. Which role assignment should you create in Azure Active Directory (AAD)?
**Note:** You can only choose one role assignment.
Answer Options
A
Virtual Machine Contributor
B
Virtual Machine Operator
C
Virtual Machine User
D
Host Pool Administrator
Correct Answer
B: Virtual Machine Operator
Explanation
The correct answer is B because the 'Virtual Machine Operator' role allows users to manage session hosts but does not provide access to manage host pools. The 'Virtual Machine Contributor' role would allow management of both session hosts and host pools, which is not required in this scenario. The 'Virtual Machine User' role only allows users to connect to session hosts, which is insufficient for John Doe's needs.