Exam AZ-104 topic 2 question 102 discussion

YNY 1. User 1 is a contributor of MG2, which cointains sub 3 and VM1. 2. User 2 is a SA Cont on storage 1 only. Can only modify tht. 3. User 3 is a UA Admin at tenant group level. Can assign roles to anything below.

YES: user 1 is contributor to the scope MG2, which is linked to sub3 and contains RG3 and VM1. contributor role can resize vm in its scope. NO: User2 is storage account contributor to the storage1 scope only not RG1. YES: User3 is user access admin to the scope tenant root group that contains all the subscriptions and therefore sub3 that contains RG3, so he can assign roles to any users and to user1

No, User1 cannot resize vm1 based on their current role and scope. User1 has the Contributor role, but their scope is limited to the Azure AD Tenant. Since vm1 is located in RG3, which is under Subscription3, User1 does No, User2 cannot create a new storage account in RG1. User2 has the Storage Account Contributor role with a scope limited to storage1. This means User2 can manage storage accounts within storage1, but does not have the permissions to create or manage storage accounts in other resource groups, including RG1. Yes, User3 can assign User1 the Owner role for RG3. User3 has the Access Administrator role with a scope of the Tenant Root Group, which generally includes the ability to manage access and permissions across the entire tenant, including all subscriptions and resource groups within it. This role allows User3 to assign roles to other users for specific resources like RG3.

1. NO: User1 has the role of contributor for the MG2 level, VM1 is located in MG1 2. NO: User2 has the role of "Storage Account Contributor" only for the storage1 resource, therefore he will not be able to create a new storage account in the resource group 3. YES: User 3 has the role "User Access Administrator" in the root of the administration group, therefore he can give access to any user

Y, N, Y

CORRECT

agreed