AZ-104 Question 55

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  The correct answer is: B. Assign User1 the User Access Administrator role for VNet1. Why not others? A. Remove User1 from the Security Reader and Reader roles for Subscription1. This option doesn’t grant any new permissions to assign roles, so it does not meet the requirement. C. Assign User1 the Network Contributor role for VNet1. Network Contributor lets you configure VNet1 but not delegate access. D. Assign User1 the Network Contributor role for RG1. Role assignment requires the User Access Administrator role or Owner role.

• 5

  Any variations of Contributor role does not allow to grant roles to other users. Contributor can be understood as resource read/write permission. To assing roles to other users you need some variation of Owner to repurce or Administrator role. Roles do not exclude each other, so if you have Read and Contributor role, you're still a Contributor and gain nothing by removing Reader role.

• Chose B5

  B. User Access Administrator do the following. Manage user access to Azure resources Assign roles in Azure RBAC Assign themselves or others the Owner role