SIMULATION You need to ensure that a user named user2-12345678 can manage the properties of the virtual machines in the RG1lod12345678 resource group. The solution must use the principle of least…

Submitted by lars.no· Mar 6, 2026Manage identities and governance in Azure - specifically implementing role-based access control (RBAC) to manage authorization and access to Azure resources (AZ-104 Domain: Manage Azure Identities and Governance)

Question

SIMULATION You need to ensure that a user named user2-12345678 can manage the properties of the virtual machines in the RG1lod12345678 resource group. The solution must use the principle of least privilege. To complete this task, sign in to the Azure portal. Answer: Sign in to the Azure portal. Browse to Resource Groups. Select the RG1lod12345678 resource group. Select Access control (IAM). Select Add > role assignment. Select Virtual Machine Contributor (you can filter the list of available roles by typing `virtual' in the search box) then click Next. Select the +Select members option and select user2-12345678 then click the Select button. Click the Review + assign button twice. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments- portal?tabs=current

Explanation

The Virtual Machine Contributor role is the correct choice because it grants the ability to manage virtual machine properties (start, stop, resize, etc.) without granting broader permissions like access to the underlying network or storage resources, or the ability to manage access rights - satisfying the principle of least privilege. Scoping the role assignment to the RG1lod12345678 resource group ensures user2-12345678 only has these permissions within that specific resource group, not across the entire subscription. The step-by-step process through Access Control (IAM) > Add Role Assignment is the standard Azure RBAC mechanism for delegating permissions.

Topics

#Azure RBAC#Role Assignment#Principle of Least Privilege#Azure Virtual Machines

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice