You have an Azure subscription that contains a user named User1. You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least…

The correct answer is C. Contributor. Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Incorrect Answers: A: Owner: Grants full access to manage all resources, including the ability to assign roles in B: Virtual Machine Contributor: Lets you manage virtual machines…

Submitted by kev92· Mar 4, 2026Manage Azure identities and governance

Question

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege. Which role-based access control (RBAC) role should you assign to User1?

Options

AOwner
BVirtual Machine Contributor
CContributor
DVirtual Machine Administrator Login

How the community answered

(62 responses)

A
5% (3)
B
16% (10)
C
71% (44)
D
8% (5)

Explanation

Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Incorrect Answers: A: Owner: Grants full access to manage all resources, including the ability to assign roles in B: Virtual Machine Contributor: Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to. D: Virtual Machine Administrator Login: View Virtual Machines in the portal and login as https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice