Exam AZ-104 topic 2 question 71 discussion

There is only two choices for that puspose; - Assign User1 the Owner role for VNet1. - Assign User1 the User Access Administrator role for VNet1.

C is corerct

To ensure that User1 can assign the Reader role for VNet1 to other users, you should: A. Assign User1 the Network Contributor role for VNet1. The Network Contributor role grants permissions to manage network resources, including virtual networks (VNet1), but restricts access to only those resources. By assigning User1 the Network Contributor role for VNet1, you provide them with the necessary permissions to manage role assignments specifically for VNet1, including assigning the Reader role to other users. This approach adheres to the principle of least privilege by granting only the necessary permissions for managing network resources without providing broader access to other resources in the subscription or resource group. Option C is incorrect because assigning the Owner role for VNet1 provides excessive permissions, allowing User1 to manage all aspects of the virtual network, which exceeds the requirement to assign the Reader role to other users.

C is right

I did see this on the exam

C. seems correct

C is correct. It is the only role in the give options have capability to assign permissions.

Same as Question 53. https://www.examtopics.com/discussions/microsoft/view/74021-exam-az-104-topic-2-question-53-discussion

C is the answer. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

C is correct only Owner can assign roles (even reader role).

Correct

Answer is correct.