Exam AZ-120 topic 3 question 18 discussion

DRAG DROP -
You deploy an SAP environment on Azure.
You need to grant an SAP administrator read-only access to the Azure subscription. The SAP administrator must be prevented from viewing network information.
How should you configure the role-based access control (RBAC) role definition? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Suggested Answer:
Box 1: "*/read"
"*/read" allows you to view everything in the subscription.
You need to grant an SAP administrator read-only access to the Azure subscription
Box 2: "Microsoft.Network/*/read"
The SAP administrator must be prevented from viewing network information.