Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure Administrator for Contoso Ltd.
A team of developers needs permissions to manage only specific Azure App Service instances within a resource group named RG1.
They should have the ability to manage these specific App Service instances, but should not have access to other App Service instances or other resources in RG1.
You need to assign the appropriate permissions to the developers.
Which of the following actions should you take?
Use Microsoft Entra ID Administrative Units to group the specific App Service instances and assign the developers to the administrative unit
Create a custom role with permissions limited to the specific App Service instances and assign it at the resource scope
Assign the built-in Contributor role to the developers at the resource group scope
Assign the built-in Website Contributor role to the developers at the resource group scope
To provide the developers with permissions to manage specific Azure App Service instances without granting access to other resources, you need to create a custom role. By defining a custom role, you can specify the precise permissions and limit the scope to the specific App Service instances. Custom roles allow you to tailor permissions beyond what built-in roles offer. Assigning built-in roles at the resource group scope would grant access to all resources of that type within the resource group, which does not meet the requirement. Microsoft Entra ID Administrative Units are used for delegating administrative permissions over objects in Microsoft Entra ID and do not control access to Azure resources.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a custom role in Azure?
Open an interactive chat with Bash
How do you assign permissions to a specific Azure resource?
Open an interactive chat with Bash
What is the difference between built-in roles and custom roles in Azure?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .