nerdexam
MicrosoftMicrosoft

AZ-140 · Question #64

AZ-140 Question #64: Real Exam Question with Answer & Explanation

The correct answer is D: Create a role assignment.. To grant users access to an AVD host pool, you create a role assignment — specifically assigning the 'Desktop Virtualization User' built-in role to the user group at the scope of the application group. A role definition (Choice A) merely defines what permissions a role has; it

Submitted by ngozi_ng· Apr 18, 2026Plan and implement identity and security

Question

You deploy an Azure Virtual Desktop session host pool. You need to provide a group of pilot users access to the virtual machines in the pool. What should you do?

Options

  • ACreate a role definition.
  • BAdd the users to a Remote Desktop Users group on the virtual machines.
  • CAdd the users to the local Administrators group on the virtual machines.
  • DCreate a role assignment.

Explanation

To grant users access to an AVD host pool, you create a role assignment — specifically assigning the 'Desktop Virtualization User' built-in role to the user group at the scope of the application group. A role definition (Choice A) merely defines what permissions a role has; it does not grant access by itself. Adding users to Remote Desktop Users (Choice B) or local Administrators (Choice C) on individual VMs bypasses AVD's access model and does not integrate with AVD brokering or application groups. The correct AVD access model always uses Azure RBAC role assignments.

Topics

#Azure Virtual Desktop#RBAC#User Access#Role Assignment

Community Discussion

No community discussion yet for this question.

Full AZ-140 PracticeBrowse All AZ-140 Questions