AZ-104 Certification Practice Question #109

Question

You have a Microsoft Entra tenant that is linked to the subscriptions shown in the following table.

You have the resource groups shown in the following table.

You assign roles to users as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

1. **User1 (Yes):** User1 is assigned the Contributor role at the Management Group `MG2` scope. Since `Sub3` is a child of `MG2`, and `RG3`/`VM1` are child resources of `Sub3`, User1 inherits Contributor permissions on `VM1`. A Contributor has full management access, including the ability to resize virtual machines.
2. **User2 (No):** User2 is assigned the Storage Account Contributor role at the specific resource scope of `storage1`. Since this role is scoped to a single resource, User2 has no write permissions at the Resource Group `RG1` level and cannot create a new storage account there.
3. **User3 (Yes):** User3 is assigned the User Access Administrator role at the `Tenant Root Group` level. Since the Tenant Root Group is the top-level container, these access administration permissions are inherited by all subscriptions and resource groups in the tenant, allowing User3 to assign any Azure role (including Owner) to User1 for `RG3`.

More AZ-104 practice questions