Exam AZ-500 topic 4 question 92 discussion

1. Microsoft Portal 2. Microsoft Network https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-services-resource-providers

You need to have access to microsoft.resources/deployments/validate/action, Microsoft.Network/applicationSecurityGroups/write So, since Microsoft Resources is not listed, at least Network is required. Azure Portal is not required. Tested on my environment.

Only need permission of Microsoft.Network. (1) To access Azure portal, User1 must be assigned the Reader role at the subscription level or higher. The Reader role allows users to view resources in Azure, but not modify them. If User1 is not assigned the Reader role, they will not be able to log in to Azure portal. User1 has been assigned the Reader role for the subscription. No further permission is required. (2) To create and manage application security groups by using Azure portal, User1 needs the following two permissions: - Microsoft.Network/applicationSecurityGroups/write - Microsoft.Network/applicationSecurityGroups/delete

I agree with the given answer.

I think the answer should be Microsoft Graph and azure Service Management (Microsoft Portal) Microsoft Graph: Take advantage of the tremendous amount of data in Office 365, Enterprise Mobility + Security, and Windows 10. Access Azure AD, Excel, Intune, Outlook/Exchange, OneDrive, OneNote, SharePoint, Planner, and more through a single endpoint. Azure Service Management: Programmatic access to much of the functionality available through the Azure portal