AZ-104 Certification Practice Question #70

Question

You have an Azure subscription named Subscription1 that contains a virtual network VNet1.
You add the users in the following table.

Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **Adding a subnet:** This requires network modification permissions (`Microsoft.Network/virtualNetworks/subnets/write`). Both the **Owner** (User1) and the **Network Contributor** (User3) have this privilege. The Security Admin (User2) does not.
2. **Assigning a role:** Modifying role assignments requires authorization write permissions (`Microsoft.Authorization/roleAssignments/write`). Only the **Owner** (User1) has this privilege out of the three. Network Contributor is explicitly barred from managing resource access. Security Admin also lacks the ability to assign RBAC roles to Azure resources.

More AZ-104 practice questions