Microsoft Azure Administrator Associate AZ-104 Practice Question

Assigning the Virtual Machine Contributor role at the resource group scope allows the development team to manage virtual machines, including actions like starting, stopping, and restarting them, within DevResources. This role does not grant permissions to manage other resources such as network interfaces or to modify access permissions.

The Contributor role provides full access to all resources within the scope, including the ability to delete resources and manage roles, which exceeds the requirements and poses unnecessary risk.

The Reader role only allows viewing resources and does not permit managing virtual machines.

The Owner role grants full access, including the ability to manage access control, which is more than required.