Home / Microsoft / AZ-104 / Question 19

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.

Subscription1 has a user named User1. User1 has the following roles:

Reader

Security Admin

Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

• Remove User 1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

• Assign User1 the Owner role for VNet1.

• Remove User1 from the Security Reader and Reader roles for Subscription1.

• Assign User1 the Network Contributor role for RG1.

Has full access to all resources including the right to delegate access to others.

What is Azure role-based access control (Azure RBAC)?