AZ-140 · Question #107
You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com. You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine…
The correct answer is B. Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1 E. Generate a registration token. The Desktop Virtualization Session Host Operator role allows users to view and remove session hosts, as well as change drain mode. Users can't add session hosts using the Azure portal because they don't have write permission for host pool objects. If the registration token is…
Question
You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com. You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine Contributor role for the Azure subscription to a user named Admin1. You need to ensure that Admin1 can add session hosts to Pool1. The solution must use the principle of least privilege. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AAssign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1
- BAssign Admin1 the Desktop Virtualization Session Host Operator role for Pool1
- CAdd Admin1 to the AAD DC Administrators group
- DAssign a Microsoft 365 Enterprise E3 license to Admin1
- EGenerate a registration token
How the community answered
(30 responses)- A10% (3)
- B80% (24)
- C3% (1)
- D7% (2)
Explanation
The Desktop Virtualization Session Host Operator role allows users to view and remove session hosts, as well as change drain mode. Users can't add session hosts using the Azure portal because they don't have write permission for host pool objects. If the registration token is valid (generated and not expired), users assigned this role can add session hosts to the host pool outside of the Azure portal if they also have the Virtual Machine Contributor role.
Topics
Community Discussion
No community discussion yet for this question.