Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure administrator. Your developers need to manage virtual machines in a resource group but should not be able to modify virtual networks. What is the best way to accomplish this?
Assign the 'Contributor' role to the developers at the resource group level.
Create an Azure Active Directory custom role with the necessary permissions.
Use Azure PowerShell to create a custom role with 'New-AzRoleDefinition' and a JSON template.
Create a custom role in the Azure portal by cloning the 'Virtual Machine Contributor' role and removing network permissions.