Microsoft Azure Administrator Associate AZ-104 Practice Question
A user reports they can manage virtual machines in a resource group, but they have not been assigned any roles at that resource group level. As an Azure administrator, how can you identify the permissions that grant the user this access?
Create an access review for the resource group
Review the Azure Entra ID roles assigned to the user
Use the Check access feature in Access Control (IAM) to view the user's role assignments
Examine the activity log for role assignment changes
To identify how the user has these permissions, you should use the Check access feature in the Access Control (IAM) blade for the resource group. This feature allows you to view all the role assignments for the user, including those inherited from higher scopes like the subscription or management group. By examining the user's access, you can determine which roles are granting the permissions and at what scope. Reviewing Azure Entra ID roles or creating an access review wouldn't provide information about resource-level permissions. The activity log shows changes but doesn't display inherited role assignments.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does the Check access feature in Access Control (IAM) do?
Open an interactive chat with Bash
What is the difference between inherited and direct role assignments?
Open an interactive chat with Bash
How does Access Control (IAM) relate to role-based access control in Azure?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .