Exam AZ-500 topic 3 question 24 discussion

answers correct

Got this in the AZ-500 exam (Sept 2021)! A: U1, U1 and U2

Please provide a source why the owner is the only one able to modify the permissions

User 1 only User 1 and User 2 only

The answers are correct

Contributor role: Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC... I will go with User1 only, User1&User2 Only.

I think Service administrator can modify permissions and create virtual networks in RG1: The Service Administrator has the equivalent access of a user who is assigned the Owner role at the subscription scope. The Service Administrator has full access to the Azure portal. https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#:~:text=The%20Service%20Administrator%20has%20the%20equivalent%20access%20of%20a%20user%20who%20is%20assigned%20the%20Owner%20role%20at%20the%20subscription%20scope.%0AThe%20Service%20Administrator%20has%20full%20access%20to%20the%20Azure%20portal.

Only User Access Admin/Owner can modify permission

In exam: 20-7-2022

In exam 15-July-2022

The 1st answers is Wrong! Contributors does not allow you to assign roles, but it can change permission of resources. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#security-admin

In Exam - 20/6/2022 - 1 Case Study ( 6 ) - Lab ( 10 Tasks )

In exam Dec 21. 40 questions, 1 case study, no labs.

#exam ques # 29 Sep

## Exam Question - 17 Sept 2021 ##

Only Owner & User Access Administrator access have rights to delegate access to others. In order to get User Access Administrator, user needs to be Global admin in Azure AD.

Correct!