1. Admin2 2. Operator1 https://docs.microsoft.com/en-us/azure/virtual-desktop/rbachttps://docs.microsoft.com/en-us/azure/virtual-desktop/rbac "The Host Pool Contributor role lets you manage all aspects of host pools, including access to resources. You'll need an extra contributor role, Virtual Machine Contributor, to create virtual machines. You will need AppGroup and Workspace contributor roles to create host pool using the portal or you can use Desktop Virtualization Contributor role.The Host Pool Contributor role lets you manage all aspects of host pools, including access to resources. You'll need an extra contributor role, Virtual Machine Contributor, to create virtual machines. You will need AppGroup and Workspace contributor roles to create host pool using the portal or you can use Desktop Virtualization Contributor role."

- by default, any domain user can join up to 10 devices. If there are not set up restrictions. - A user with the Server Operator role in Active Directory has elevated permissions, including the ability to join computers to the domain. If not set restrictions. So All operators CAN by default join host to domain. But only operator1 can for sure join vm's to domain. I hate this kind of questions..

Admin2 Only Operator1 Only Desktop Virtualization Host Pool Contributor The Desktop Virtualization Host Pool Contributor role allows users to manage all aspects of host pools, including access to resources. You'll also need the Virtual Machine Contributor role to create virtual machines. You will need Desktop Virtualization Application Group Contributor and Desktop Virtualization Workspace Contributor roles to create host pools using the portal, or you can use the Desktop Virtualization Contributor role.

Here is my take regarding the question in which I will be selecting Admin2. The requirement calls for creating the pool settings and VMs. The only role that can do this is Desktop Virtualization Contributor. Admin4 can create the pool and its settings but will not be able to add or create virtual machines in the pool unless the virtual machine contributor role is assigned.

1. Admin 2 and Admin 4 only - The case study does not state the host pool has to be created using the Azure portal; therefore, Admin 4 could create the host pool using PowerShell, the Azure CLI, or an ARM template. 2. Operator 1

Tested in the lab. only Admin2 can create pool4.

1. Admin2 Only - Admin4 won't work, see https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-host-pool-contributor 2. Operator 1

1. admin2 only (not admin4) https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-host-pool-contributor Desktop Virtualization Host Pool Contributor (admin4) still need VM contributor role to create VM. During creation of VMs IN HOST POOL and if you want to join VMs into the on-premises domain, you need to input Operator 1 (domain admin password)

Admin 2 Operator 1 Domain Admin and Operator 2 and 3 can join by default, authenticated users can join up to 10 Machines.

for first box, Admin2 and Admin 4 https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac?WT.mc_id=AZ-MVP-5004159#session-host-operator

Admin2 and Admin4 only, Operator1

Admin 1 & 3 are cloud only users, to domain join you need a domain admin which is operator1