Exam AZ-104 topic 2 question 45 discussion

Correct. Security admin can't add subnets. Only owner can assign roles.

1) Add a subnet to VNET1 = "User1 and User3 only" 2) Assign a user the Reader role to VNEt1 = "User1 only" Explanation: User1 - The Owner Role lets you manage everything, including access to resources. User3 - The Network Contributor role lets you manage networks, including creating subnets. User2 - The Security Admin role can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.

Appeared in today's exam 1) User 1 and User 3 2) User 1 only

MS Documentation: You can apply tags to your Azure resources, resource groups, and subscriptions but not to management groups. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources

Box 1 - User1 and User3 only Box 2 - User1 only

Correct

It's 1 & 3 for both answers as both can manage the network and grant access to the vnet.

1.User1 and User3 2. User1 only because security admin can't add security roles

What we are looking for here is Microsoft.Authorization/* permission actions for role assignment. Only Owner role has that among the given choices. Given answer is correct.

The provided answer is correct.

Add a subnet to VNet1: User1 and User3 Only Assign a user the Reader role to VNet1: User1 Only https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Add a subnet to VNet1: User1 and User3 Only Assign a user the Reader role to VNet1: User1 Only https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

the answer is correct, only owner can assign reader role and owner and contributer can add subnet

Answer is Correct Owner : Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. Security Administrator Can read security information and reports, and manage configuration in Azure AD and Office 365 (That means he cant assign roles in Azure RBAC) Network contributor : Lets you manage networks, but not access to them.