Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
My answer: NO https://learn.microsoft.com/en-us/azure/network-watcher/rbac-permissions#traffic-analytics As per docs: 1. Network contributor doesn't include the following actions: Microsoft.Storage/* actions listed in Additional actions or Flow logs section. Microsoft.Compute/* actions listed in Additional actions section. Microsoft.OperationalInsights/workspaces/*, Microsoft.Insights/dataCollectionRules/*, or Microsoft.Insights/dataCollectionEndpoints/* actions listed in Traffic analytics section. 2. enabling TRAFFIC ANALYTICS is part of the FLOW LOG resource, you need the following permissions in addition to all the required permissions for Flow logs ...
A. Yes Assigning Network Contributor at the subscription level to Admin1 meets the goal. For Azure Network Watcher Traffic Analytics, one of the acceptable built-in roles at the subscription scope is Owner, Contributor, or Network Contributor.
Minimum Requirements to Enable Traffic Analytics To enable Traffic Analytics, the user needs permissions to: Register the insight provider → Microsoft.Insights Access Network Watcher → Read/write on Network Watcher Configure NSG Flow Logs → Read/write on NSGs Access Storage Account → For flow log storage so the answer is: YES