Exam AZ-104 topic 7 question 2 discussion

Correct Answer: D As per User Requirements “Designate a new user named Admin1 as the service admin for the Azure subscription.” So, In the Azure portal, you can view or change the Service Administrator or view the Account Administrator on the properties blade of your subscription. Check this: https://i.imgur.com/fKzqPKq.png

Came in 01/09/21 exam. Passed exam with 906 marks. 98% of the questions are from this dump.

Azure Portal > Subscriptions > [Your Subscription] > Access control (IAM). From there, you can assign Admin1 the appropriate role and ensure they have the necessary permissions.

To designate Admin1 as the service administrator and give appropriate access, you must assign them a role through IAM settings at the subscription level. 📧 This is also where you configure permissions to receive service outage alerts by attaching monitoring roles or subscriptions for notifications.

What is the equivalent Azure role I should assign for Service Administrator? Owner role at subscription scope has the equivalent access. --> so IAM is correct

The Service Administrator role in Azure is being transitioned to the Owner role in the new role-based access control (RBAC) system. The Owner role provides equivalent permissions to the Service Administrator and is the recommended approach

It's C now, got changed to IAM

As of August 31, 2024, Azure classic administrator roles are retired and no longer supported. Starting on April 30, 2025, any Co-Administrator or Service Administrator role assignments will lose access. If you still have active Co-Administrator or Service Administrator role assignments, convert these role assignments to Azure RBAC immediately.

Probably was properties in the past but now there's no properties button, just Access Control (IAM)

No longer the case: As of August 31, 2024, Azure classic administrator roles (along with Azure classic resources and Azure Service Manager) are retired and no longer supported. Starting on April 30, 2025, any Co-Administrator or Service Administrator role assignments will lose access. If you still have active Co-Administrator or Service Administrator role assignments, convert these role assignments to Azure RBAC immediately.

update the answer is C now

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal-subscription-admin#:~:text=Access%20control%20(IAM)%20is%20the%20page%20that%20you%20typically%20use%20to%20assign%20roles%20to%20grant%20access%20to%20Azure%20resources.%20It%27s%20also%20known%20as%20identity%20and%20access%20management%20(IAM)%20and%20appears%20in%20several%20locations%20in%20the%20Azure%20portal.

I don't know about the old comments specifically for this scenario. IAM is created for this only.

I do not have Properties in my blade

I went into properties of sub and what I see: - "change service admin" button is disabled "Change service administrator functionality is no longer supported" - "Service admin" field exist however can't be change Probably the question should be removed from examtopics "As of August 31, 2024, Azure classic administrator roles (along with Azure classic resources and Azure Service Manager) are retired and no longer supported. If you still have active Co-Administrator or Service Administrator role assignments, convert these role assignments to Azure RBAC immediately." https://learn.microsoft.com/en-us/azure/role-based-access-control/classic-administrators?tabs=azure-portal#service-administrator-retirement

In properties just says: Change service administrator functionality is no longer supported. Learn more. For any other issues, contact support. And button for change service admin is grayed. Answer is C now.

Answer: C https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles As of August 31, 2024, Azure classic administrator roles (along with Azure classic resources and Azure Service Manager) are retired and no longer supported. If you still have active Co-Administrator or Service Administrator role assignments, convert these role assignments to Azure RBAC immediately.