AZ-104 Certification Practice Question #282

Question

You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

- **User1 (Create initiative definitions):** Creating policy or initiative definitions requires write permissions on the definitions (e.g. `Microsoft.Authorization/policydefinitions/write`). The **Resource Policy Contributor** role at the subscription level (**Sub1**) provides the necessary permissions to create and manage definitions without granting full administrative privileges like Owner.
- **User4 (Assign initiatives to RG2):** Assigning policies or initiatives to a resource group requires permissions to write policy assignments (e.g., `Microsoft.Authorization/policyassignments/write`) at that scope. The **Contributor** role assigned at the resource group level (**RG2**) provides sufficient permission to manage assignments and resources within that specific resource group, without granting the ability to create or modify global policy definitions.

More AZ-104 practice questions