Microsoft Azure Administrator Associate AZ-104 Practice Question
As an Azure administrator, you need to determine which users, groups, and service principals have been assigned roles on a specific resource group in your Azure subscription and understand the permissions each assignment grants. What is the most effective tool or method to accomplish this task?
Use Azure Advisor to generate a report on resource-group access.
Review Microsoft Entra ID role assignments (such as the User Administrator role) in the Microsoft Entra admin center.
Use the 'Access control (IAM)' section in the Azure portal to view the role assignments for the resource group.
Check the resource group's Properties pane to see assigned users and groups.
The Access control (IAM) blade in the Azure portal displays every role assignment that applies to the chosen resource group. By opening that blade and selecting the Role assignments or Check access tab, you can review all security principals that have access-whether assigned directly or inherited-and, if needed, open the role definition to see the exact actions each role allows.
The Properties blade of a resource group shows settings such as region and tags but does not list RBAC assignments. Viewing Microsoft Entra ID role assignments (for example, the User Administrator directory role) only reveals directory-level privileges and does not reflect Azure RBAC permissions on resource groups. Azure Advisor focuses on cost, security, reliability, performance, and operational-excellence recommendations and does not enumerate role assignments.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Access control (IAM) blade in Azure?
Open an interactive chat with Bash
What is a security principal in Azure RBAC?
Open an interactive chat with Bash
How does the 'Role assignments' tab differ from the 'Check access' tab in IAM?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .