Hotspot Question You have the following custom role-based access control (RBAC) role. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correc

The correct answer is Users that are assigned Role1 can assign Role1 to users. = No; Users that are assigned Role1 can deploy new virtual machines. = Yes; Users that are assigned Role1 can set a static IP address on a virtual machine. = Yes. The custom RBAC role includes 'Microsoft.Compute/virtualMachines/write' which allows deploying/creating new virtual machines (Yes), and 'Microsoft.Network/networkInterfaces/write' or similar network permissions which allow modifying network interface settings like setting a stati

Submitted by katya_ua· Mar 4, 2026Manage identity and access – Configure role-based access control (RBAC) for Azure resources

Question

Hotspot Question You have the following custom role-based access control (RBAC) role. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

Answer Area

Users that are assigned Role1 can assign Role1 to users.No
Users that are assigned Role1 can deploy new virtual machines.Yes
Users that are assigned Role1 can set a static IP address on a virtual machine.Yes

Explanation

The custom RBAC role includes 'Microsoft.Compute/virtualMachines/write' which allows deploying/creating new virtual machines (Yes), and 'Microsoft.Network/networkInterfaces/write' or similar network permissions which allow modifying network interface settings like setting a static IP address (Yes). However, the role does NOT include 'Microsoft.Authorization/roleAssignments/write', which is the specific permission required to assign roles to other users - without this action, users cannot delegate Role1 or any role to others (No).

Topics

#Azure RBAC#Custom Roles#IAM#Azure Compute and Networking

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice