Exam AZ-104 topic 2 question 99 discussion

The correct answer is: C. Sub1 You can add Admin1 as a co-administrator to the Sub1 subscription. You cannot add Admin1 as a co-administrator to the RG1 resource group, MG1 management group, or VM1 virtual machine. Co-administrators have full access to all resources in a subscription, including the ability to create, read, update, and delete resources. To add Admin1 as a co-administrator to Sub1: In the Azure portal, navigate to Sub1. Click Access control (IAM). Click Assign role. Select the Co-Administrator role. Select Admin1 in the Select drop-down list. Click Assign. Once the role has been assigned, Admin1 will have full access to all resources in Sub1. Note: Co-administrators can only be assigned at the subscription scope. You cannot assign co-administrators to resource groups, management groups, or virtual machines.

Answer is correct. A new question about a legacy topic. Co-Administrators where a thing before Azure RBAC was introduced - and will be deprecated from Aug 31, 2024... Co-administrators have full access to all resources in a subscription, including the ability to create, read, update, and delete resources.

Co-admin is a role that no longer exists in Azure as of August 2024. This question is obsolete.

As of August 31st 2024, classic Azure Role has retired, which includes retirement of co-administrator role.

C is corerct

Sub1 (Subscription): This is the correct level to add Admin1 as a co-administrator. Adding a co-administrator at the subscription level allows that user to manage everything within the subscription.

C is correct

from 15 February 2024 you will not be able to add new Co-Administrator

When you try adding co-admin role to VM you get a notification saying " Co-admin can be added in Sub level"

The correct answer is C: Sub1, however this is a leagacy question, Co-Administrator and Service Administrator roles are used with classic ressources: Classic resources and classic administrators will be retired on August 31, 2024. Remove unnecessary Co-Administrators and use Azure RBAC for fine-grained access control. ref: https://learn.microsoft.com/en-us/azure/role-based-access-control/classic-administrators