HOTSPOT
-
You have an Azure subscription that contains a resource group named RG1. RG1 contains two virtual machines named VM1 and VM2 that have Microsoft Entra ID login enabled.
The subscription contains the users shown in the following table.
Which users can sign in to VM1, and which users can sign in to VM2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer provided is correct. VM1: User1 and User3 only, because User1 has a role scope for the entire subscription (which includes the resource group named RG1) and User3 to VM1. Also, both of their roles allow the users to login into the VM. VM2: Only User1, because User2 has the "Virtual Machine Contributor" role and that does not allow login to any VM and User3 is limited to VM1 for access.
Correct! The Virtual Machine Contributor role in Azure allows users to manage virtual machines, including actions like creating, deleting, and configuring VMs. However, it does not grant permissions to log into the virtual machine itself To log into a VM, you would need the Virtual Machine Administrator Login or Virtual Machine User Login roles
The answre is correct. Virtual Machine Contributor role does not grant you management access to the virtual network or storage account the virtual machines are connected to. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#compute