Microsoft Azure Administrator (legacy) — Question 72

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles:
✑ Reader
✑ Security Admin
✑ Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?

Answer options

• A. Assign User1 the Network Contributor role for RG1.
• B. Assign User1 the User Access Administrator role for VNet1.
• C. Remove User1 from the Security Reader and Reader roles for Subscription1.
• D. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

Correct answer: B

Explanation

The correct answer is B because the User Access Administrator role allows User1 to manage user access to VNet1, enabling them to assign roles like Reader to other users. Options A, C, and D do not provide the necessary permissions to manage role assignments specifically for VNet1.