You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that ServerAdmins can perform the following tasks:
Create virtual machines in RG1 only.
Connect the virtual machines to the existing virtual networks in RG2 only.
The solution must use the principle of least privilege.
Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Question

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that ServerAdmins can perform the following tasks:

Create virtual machines in RG1 only.

Connect the virtual machines to the existing virtual networks in RG2 only.

The solution must use the principle of least privilege.

Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

matteo vadagnini · Accepted Answer

a custom RBAC role for RG2

matteo vadagnini · Accepted Answer

the Virtual Machine Contributor role for RG1

matteo vadagnini · Answer

the Network Contributor role for RG2

matteo vadagnini · Answer

the Contributor role for the subscription

matteo vadagnini · Answer

a custom RBAC role for the subscription

matteo vadagnini · Answer

the Network Contributor role for RG1

List of questions