nerdexam
Microsoft

AZ-104 · Question #566

Hotspot Question You have two Azure subscriptions named Sub1 and Sub2. Sub1 is in a management group named MG1. Sub2 is in a management group named MG2. You have the resource groups shown in the…

The correct answer is User1 can sign in to VM1. = No; User2 can manage disks and disk snapshots of VM1. = Yes; User2 can manage disks and disk snapshots of VM3. = Yes. User1 has Virtual Machine Contributor role on RG1 (Sub1), which grants the ability to manage VMs but does NOT include the ability to sign in to VMs - that requires the 'Virtual Machine Administrator Login' or 'Virtual Machine User Login' role. User2 has Disk Snapshot…

Submitted by kim_seoul· Mar 4, 2026Manage identity and access - specifically, managing Azure role-based access control (RBAC) including role assignments, scope inheritance through management groups and subscriptions, and understanding the permissions granted by built-in roles like Virtual Machine Contributor and Disk Snapshot Contributor.

Question

Hotspot Question You have two Azure subscriptions named Sub1 and Sub2. Sub1 is in a management group named MG1. Sub2 is in a management group named MG2. You have the resource groups shown in the following table. You have the virtual machines shown in the following table. You assign roles to users as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-104 question #566 exhibit 1
AZ-104 question #566 exhibit 2
AZ-104 question #566 exhibit 3
AZ-104 question #566 exhibit 4
AZ-104 question #566 exhibit 5
AZ-104 question #566 exhibit 6

Answer Area

  • User1 can sign in to VM1.No
  • User2 can manage disks and disk snapshots of VM1.Yes
  • User2 can manage disks and disk snapshots of VM3.Yes

Explanation

User1 has Virtual Machine Contributor role on RG1 (Sub1), which grants the ability to manage VMs but does NOT include the ability to sign in to VMs - that requires the 'Virtual Machine Administrator Login' or 'Virtual Machine User Login' role. User2 has Disk Snapshot Contributor role on MG1 (which contains Sub1 and RG1 where VM1 resides), granting management of disks and snapshots for VM1. User2 also has Disk Snapshot Contributor on Sub2 (which contains RG3 where VM3 resides), so they can also manage disks and snapshots for VM3.

Topics

#Azure RBAC#Management Groups#Role Inheritance#Virtual Machine Access Control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice