Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure administrator for your company. Certain users need to manage virtual networks but must not have the ability to delete them. How should you fulfill this requirement?
Create a custom role that excludes the delete permission for virtual networks, then assign this role to users
Implement a resource lock to prevent deletion of virtual networks
Assign the built-in 'Network Contributor' role to the users
Use Azure Policy to prevent deletion of virtual networks