Microsoft Azure Administrator — Question 82

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.

Subscription1 has a user named User1. User1 has the following roles:

• Reader
• Security Admin
• Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Answer options

• A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
• B. Assign User1 the Access Administrator role for VNet1.
• C. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
• D. Assign User1 the Network Contributor role for RG1.

Correct answer: B

Explanation

The correct answer is B because assigning the Access Administrator role to User1 for VNet1 will grant them the necessary permissions to manage role assignments for that virtual network. The other options either remove essential roles or do not provide the specific access needed for User1 to assign the Reader role effectively.