Skip to Content

AZ-104: How to choose the right built-in role in Azure

By: Author Alex Lim

Posted on

Categories Exam

Learn how to choose the right built-in role in Azure and understand the differences between the Owner, Contributor, Reader, and User Access Administrator roles.

Table of Contents

Question

Suppose an administrator wants to assign a role to allow a user to create and manage Azure resources but not be able to grant access to others. Which of the following built-in roles would support this?

A. Owner
B. Contributor
C. Reader
D. User Access Administrator

Answer

B. Contributor

Explanation

A contributor can create and manage all types of Azure resources, but they can’t grant access to other users.

  • The Contributor role grants full access to manage all resources, but does not allow role assignments in Azure RBAC. This means the user can create and manage Azure resources, but not grant access to others.
  • The Owner role grants full access to manage all resources, including role assignments in Azure RBAC. This means the user can create and manage Azure resources, and also grant access to others. This role does not meet the requirement of the question.
  • The Reader role grants view-only access to all resources. This means the user can only see Azure resources, but not create or manage them. This role does not meet the requirement of the question.
  • The User Access Administrator role grants access to manage user access to Azure resources. This means the user can assign roles in Azure RBAC, but not create or manage Azure resources. This role does not meet the requirement of the question.

A is incorrect becaue an owner can create and manage all types of Azure resources; however, they can grant access to other users.
C is incorrect because a reader can only view existing Azure Resources.
D is incorrect because a user access administrator can only manage access of Azure resources.

Microsoft Azure Administrator AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure Administrator AZ-104 exam and earn Microsoft Azure Administrator AZ-104 certification.