Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 39 of 225
Free Preview · 225 of 749 · questions 1–225 of 749 are free. Sign up free to sync your progress across devices.
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
Y N Y User1 can create a new virtual machine in RG1. Yes Reason: User1 is a member of Group1, which has the Virtual Machine Contributor role for MG1. RG1 is part of Sub1, which falls under MG1, thus granting User1 VM creation permissions in RG1. User2 can grant permissions to Group2. No Reason: There is no indication that User2 has been assigned any role that allows granting permissions. User3 can create a storage account in RG2. Yes Reason: User3 is part of Group3, which has the Contributor role at the Tenant Root Group level. This role allows User3 to create resources, including storage accounts, in any resource group within the tenant, including RG2.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
YNN. Group 3 has contributor role but has no members. User3 is instead a member of group 1 and 2 and neither group 1 or 2 has permission on sub3
This got me as well - nest group permissions are inherited: "Role assignments are transitive for groups, which means that if a user is a member of a group and that group is a member of another group that has a role assignment, the user has the permissions in the role assignment." https://learn.microsoft.com/en-us/azure/role-based-access-control/overview?utm_source=chatgpt.com User 3 Yes
I think answer should be YNN For User3 can create a Storage Account, this should be No. User3 cannot create storage because Nested Group permissions are neglected in AAD. TO be able to create a storage User3 has to be a member of the Group3. Note: Nested groups don't gain access to shared resources and applications that are assigned to the parent group. https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-groups#add-a-group-to-another-group