Microsoft Azure Security Engineer Associate AZ-500 Practice Question
You have an Azure subscription that contains several resource groups, including one named SalesRG. You must allow a user named User1 to grant, modify, and revoke role assignments for principals in SalesRG, but you must not permit User1 to create, update, or delete any resources in that resource group. Which Azure built-in role should you assign to User1 at the SalesRG scope?
The User Access Administrator role is intended for delegating access management without granting resource management capabilities. It allows the assignee to create, update, and remove role assignments within the scope but does not provide permissions to modify the resources themselves. The Owner role would also permit role assignments but includes full control over all resources, exceeding the requirement. Contributor can manage resources but cannot grant access, and Reader is limited to viewing resources only. Therefore, assigning the User Access Administrator role best meets the stated requirements while adhering to the principle of least privilege.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the User Access Administrator role in Azure?
Open an interactive chat with Bash
How does the principle of least privilege apply to Azure roles?
Open an interactive chat with Bash
What differentiates the User Access Administrator role from the Owner role in Azure?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure identity and access
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .