nerdexam
Microsoft

AZ-500 · Question #305

Drag and Drop Question You have three Azure subscriptions and a user named User1. You need to provide User1 with the ability to manage and view costs for the resources across all three…

The correct answer is Create a management group.; Assign User1 the Cost Management Contributor role for the management group.; Add the three subscriptions to the management group. Creating a management group and adding the three subscriptions to it allows centralized governance across all subscriptions. Assigning User1 the 'Cost Management Contributor' role at the management group level (which inherits down to all child subscriptions) grants the ability…

Submitted by krish.m· Mar 6, 2026Manage Azure identities and governance - specifically implementing management groups and assigning appropriate RBAC roles to manage costs across multiple subscriptions (AZ-104 / AZ-900 Governance domain)

Question

Drag and Drop Question You have three Azure subscriptions and a user named User1. You need to provide User1 with the ability to manage and view costs for the resources across all three subscriptions. The solution must use the principle of least privilege. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Answer:

Exhibit

AZ-500 question #305 exhibit

Answer Area

Drag items

Create a management group.Add the three subscriptions to the management group.Assign User1 the Global administrator role.Assign User1 the Owner role for the management group.Assign User1 the Cost Management Contributor role for the management group.

Correct arrangement

  • Create a management group.
  • Assign User1 the Cost Management Contributor role for the management group.
  • Add the three subscriptions to the management group.

Explanation

Creating a management group and adding the three subscriptions to it allows centralized governance across all subscriptions. Assigning User1 the 'Cost Management Contributor' role at the management group level (which inherits down to all child subscriptions) grants the ability to manage and view costs across all three subscriptions while adhering to least privilege - this role is scoped specifically to cost management without granting broader administrative permissions. Note that the order of steps 2 and 3 (assigning the role and adding subscriptions) can be interchanged, which is why the question states more than one order is correct.

Topics

#Azure Management Groups#Azure Cost Management#Role-Based Access Control (RBAC)#Least Privilege

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice