AZ-700 · Question #123
You have an Azure subscription that contains a user named Admin1 and a resource group named RG1. RG1 contains an Azure Network Watcher instance named NW1. You need to ensure that Admin1 can place a…
The correct answer is A. User Access Administrator. To create or delete management locks, you need access to Microsoft.Authorization/ or Microsoft.Authorization/locks/ actions. Only the Owner and the User Access Administrator built- in roles can create and delete management locks…
Question
You have an Azure subscription that contains a user named Admin1 and a resource group named RG1. RG1 contains an Azure Network Watcher instance named NW1. You need to ensure that Admin1 can place a lock on NW1. The solution must use the principle of least privilege. Which role should you assign to Admin1?
Options
- AUser Access Administrator
- BNetwork Contributor
- CResource Policy Contributor
- DMonitoring Contributor
How the community answered
(28 responses)- A71% (20)
- B4% (1)
- C18% (5)
- D7% (2)
Explanation
To create or delete management locks, you need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Only the Owner and the User Access Administrator built- in roles can create and delete management locks. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock- resources?tabs=json#who-can-create-or-delete-locks
Community Discussion
No community discussion yet for this question.