AZ-104 Certification Practice Question #78

Question

You configure the custom role shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. Logging into a virtual machine (via Microsoft Entra credentials/SSH/RDP) is a data-plane action rather than a control-plane management operation. Thus, the required permission `Microsoft.Compute/virtualMachines/login/action` must be added to the **dataActions** section of the custom role definition.
2. To restrict the availability of a custom role to a specific scope, such as resource group `RG1`, the resource path `"/subscriptions/{subscriptionId}/resourceGroups/RG1"` must be specified in the **assignableScopes** array of the custom role definition.

More AZ-104 practice questions