Microsoft Azure Administrator — Question 56

You have two Azure subscriptions named Sub1 and Sub2.
An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.
You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.
What should you do?

Answer options

• A. Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.
• B. Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1.
• C. Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.
• D. Select the custom role and add Sub1 to the assignable scopes. Remove RG1 from the assignable scopes. Create a new custom role for Sub2.

Correct answer: A

Explanation

The correct answer is A because adding both Sub1 and Sub2 to the assignable scopes allows the custom role to be applied to any resource group within both subscriptions, streamlining the process. The other options require creating additional roles or do not include both subscriptions, which increases administrative effort and complexity.