Microsoft Azure Administrator Associate AZ-104 Practice Question
Your company wants to allow a group of developers to manage virtual machines within a specific resource group in Azure. They should be able to start, stop, and restart virtual machines, but should not have permissions to delete virtual machines or assign roles to others. You need to create a role that meets these requirements. What should you do?
Add the developers to the 'Virtual Machine Operator' built-in role at the subscription level.
Create an Azure AD role with the required permissions and assign it to the developers.
Create a custom Azure RBAC role with the required permissions and assign it to the developers at the resource group scope.
Assign the developers the 'Contributor' role on the resource group.