Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
No, User1 cannot resize vm1 based on their current role and scope. User1 has the Contributor role, but their scope is limited to the Azure AD Tenant. Since vm1 is located in RG3, which is under Subscription3, User1 does No, User2 cannot create a new storage account in RG1. User2 has the Storage Account Contributor role with a scope limited to storage1. This means User2 can manage storage accounts within storage1, but does not have the permissions to create or manage storage accounts in other resource groups, including RG1. Yes, User3 can assign User1 the Owner role for RG3. User3 has the Access Administrator role with a scope of the Tenant Root Group, which generally includes the ability to manage access and permissions across the entire tenant, including all subscriptions and resource groups within it. This role allows User3 to assign roles to other users for specific resources like RG3.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It seems the answer to the 3rd question may be NO: https://learn.microsoft.com/en-us/answers/questions/5647195/user-access-administrator-role-give-another-user-t Apparently, the User Access Administrator role does not allow you to grant highly privileged roles like Owner unless it is configured that way. The question does not specify that User3's role was configured like this.
No, User1 cannot resize vm1 based on their current role and scope. User1 has the Contributor role, but their scope is limited to the Azure AD Tenant. Since vm1 is located in RG3, which is under Subscription3, User1 does No, User2 cannot create a new storage account in RG1. User2 has the Storage Account Contributor role with a scope limited to storage1. This means User2 can manage storage accounts within storage1, but does not have the permissions to create or manage storage accounts in other resource groups, including RG1. Yes, User3 can assign User1 the Owner role for RG3. User3 has the Access Administrator role with a scope of the Tenant Root Group, which generally includes the ability to manage access and permissions across the entire tenant, including all subscriptions and resource groups within it. This role allows User3 to assign roles to other users for specific resources like RG3.
YES: user 1 is contributor to the scope MG2, which is linked to sub3 and contains RG3 and VM1. contributor role can resize vm in its scope. NO: User2 is storage account contributor to the storage1 scope only not RG1. YES: User3 is user access admin to the scope tenant root group that contains all the subscriptions and therefore sub3 that contains RG3, so he can assign roles to any users and to user1