Microsoft Azure Administrator — Question 79

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.

Subscription1 has a user named User1. User1 has the following roles:

• Reader
• Security Admin
• Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Answer options

• A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
• B. Assign User1 the User Access Administrator role for VNet1.
• C. Remove User1 from the Security Reader and Reader roles for Subscription1.
• D. Assign User1 the Contributor role for VNet1.

Correct answer: B

Explanation

The correct answer is B because the User Access Administrator role allows User1 to manage access to VNet1, including assigning roles to other users. Option A would not grant the necessary permissions for role assignment, C would restrict User1's access, and D would not provide the ability to assign roles but only allow changes to VNet1 itself.