Microsoft
AZ-500 · Question #416
You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege. What should you…
The correct answer is C. Create a resource group and assign User1 to the Managed Identity Contributor role. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Submitted by asante_acc· Mar 6, 2026Secure identity and access
Question
You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege. What should you do?
Options
- ACreate a management group and assign User1 the Hybrid Identity Administrator Azure Active
- BCreate a management group and assign User1 the Managed Identity Operator role.
- CCreate a resource group and assign User1 to the Managed Identity Contributor role.
- DCreate an organizational unit (OU) and assign User1 the User administrator Azure Active
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C90% (28)
Explanation
https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Community Discussion
No community discussion yet for this question.