Microsoft Azure Administrator Associate AZ-104 Practice Question

Assigning the 'Virtual Machine Contributor' role to Alex at the resource group scope of 'DevRG' grants him the necessary permissions to manage virtual machines within that specific resource group without granting access to other resources. The 'Owner' role provides full access to all resources within the scope, including the ability to manage access control, which is more permission than required. Assigning the 'Contributor' role at the subscription scope would allow Alex to manage all resources across the entire subscription, exceeding the intended scope. The 'User Access Administrator' role allows a user to manage user access to Azure resources but does not grant permissions to manage virtual machines.