Exam AZ-103 topic 16 question 74 discussion

Actual exam question from Microsoft's AZ-103

Question #: 74
Topic #: 16

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles:
✑ Reader
✑ Security Admin
✑ Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?

A. Assign User1 the Network Contributor role for RG1.
B. Assign User1 the User Access Administrator role for VNet1.
C. Remove User1 from the Security Reader and Reader roles for Subscription1.
D. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

Show Suggested Answer

Suggested Answer: B 🗳️
The User Access Administrator role allows you to manage user access to Azure resources.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-access-administrator

by Abu_Mjaid at June 18, 2020, 7:28 p.m.

Comments

Submit Cancel

Abu_Mjaid

Highly Voted 5 years ago

Correct: https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#:~:text=The%20User%20Access%20Administrator%20role%20enables%20the%20user%20to%20grant,Azure%20subscriptions%20and%20management%20groups.

upvoted 5 times

...

Amir1909

Most Recent 1 year, 4 months ago

B is correct

upvoted 1 times

...

Amir1909

1 year, 4 months ago

B is correct

upvoted 1 times

...

kamalpur

1 year, 11 months ago

This question is explained in below video https://youtu.be/QWALJaSOmiM

upvoted 1 times

...

Kishore_Ahmed

2 years, 5 months ago

A is not correct . Because Contributor role can only do following 1 Read roles and role assignments 2 Create and manage a classic metric alert 3 Create and manage networks 4 Gets the availability statuses for all resources in the specified scope 5 Create and manage a deployment B is correct Answer. Because "User Access Administrator Role" has Actions "Microsoft.Authorizations/*" which supports following 1 Microsoft.Authorization/roleAssignments/read 2 Microsoft.Authorization/roleAssignments/write 3 Microsoft.Authorization/roleAssignments/delete 6 Gets or lists resource groups. 7 Create and update a support ticket

upvoted 1 times

...

rinku226

2 years, 8 months ago

Yes B is correct or option can be like : Assign User1 the Owner role for VNet1.

upvoted 4 times

...