You have an Azure subscription that is linked to an Azure AD tenant and contains the resources shown in the following table. Which resources can be assigned the Contributor role for VM1?

The correct answer is D. Group1, Managed1, VM1, and App1 only. https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps "You can assign a role to a user, group, service principal, or managed identity. " App1 has service principal…

Submitted by luis.pe· Mar 6, 2026Secure identity and access

Question

You have an Azure subscription that is linked to an Azure AD tenant and contains the resources shown in the following table. Which resources can be assigned the Contributor role for VM1?

Exhibits

Options

AManaged1 and App1 only
BGroup1 and Managed1 only
CGroup1, Managed1, and VM2 only
DGroup1, Managed1, VM1, and App1 only

How the community answered

(25 responses)

A
12% (3)
B
4% (1)
C
4% (1)
D
80% (20)

Explanation

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps "You can assign a role to a user, group, service principal, or managed identity. " App1 has service principal. https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-

Topics

#RBAC role assignment#managed identity#Contributor role#assignable principals

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice