Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure Administrator for Contoso Ltd.
A team of developers needs permissions to manage only specific Azure App Service instances within a resource group named RG1.
They should have the ability to manage these specific App Service instances, but should not have access to other App Service instances or other resources in RG1.
You need to assign the appropriate permissions to the developers.
Which of the following actions should you take?
Use Azure Entra ID Administrative Units to group the specific App Service instances and assign the developers to the administrative unit
Create a custom role with permissions limited to the specific App Service instances and assign it at the resource scope
Assign the built-in Contributor role to the developers at the resource group scope
Assign the built-in App Service Contributor role to the developers at the resource group scope