Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answer is: B. Assign Group1 the User Access Administrator role for the root management group. Why not the others? A. Owner at root management group ➤ Too much privilege. The Owner role allows full management of resources, violating the least privilege principle. C. User Access Administrator at a new management group ➤ A new management group won't include existing subscriptions unless you move them manually. More effort. D. Owner at a new management group ➤ Same as above, and again, the Owner role exceeds what's required (violates least privilege).
The key here is: "manage role assignments" which requires: Microsoft.Authorization/* Owner and User Access Admin can both do it - but least privilege is UAA
C is incorrect because... - it did not mention anything about move existing subscription to the new mgt group - even if it would tell to move existing subs, the action would MAXIMIZE administrative task(which does not meet second requirement)