AZ-140 · Question #247
You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains four Microsoft Entra joined session hosts. Users report that when they attempt to sign in to…
The correct answer is D. Virtual Machine User Login. Virtual Machine Contributor role (option B) would grant users more permissions than necessary, as it allows them to manage virtual machines, including creating and deleting them. This does not follow the principle of least privilege. The Virtual Machine User Login role (option…
Question
You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains four Microsoft Entra joined session hosts. Users report that when they attempt to sign in to a session host, they receive a message indicating that their account is not configured to sign in. You need to assign the users a role-based access control (RBAC) role to ensure that they can sign in to the session hosts. The solution must follow the principle of least privilege. Which role should you assign to the users?
Options
- ADesktop Virtualization Virtual Machine Contributor
- BVirtual Machine Contributor
- CVirtual Machine Administrator Login
- DVirtual Machine User Login
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- D92% (33)
Explanation
Virtual Machine Contributor role (option B) would grant users more permissions than necessary, as it allows them to manage virtual machines, including creating and deleting them. This does not follow the principle of least privilege. The Virtual Machine User Login role (option D) is the correct choice because it provides the necessary permissions for users to log in to the session hosts without granting additional management capabilities.
Topics
Community Discussion
No community discussion yet for this question.