Discover whether assigning the Reader role to an Azure AD user at the subscription level provides sufficient permissions to enable Traffic Analytics. Learn about the specific roles needed.
Table of Contents
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription.
Solution: You assign the Reader role at the subscription level to Admin1.
Does this meet the goal?
A. Yes
B. No
Answer
B. No
Explanation
Your account must meet one of the following to enable traffic analytics:
Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.
B. No, assigning the Reader role at the subscription level to the Azure AD user Admin1 does not meet the goal of enabling them to turn on Traffic Analytics for an Azure subscription.
The Reader role provides read-only access to view resources in an Azure subscription, but it does not grant permissions to modify resources or enable additional features like Traffic Analytics.
To enable Traffic Analytics, a user needs to be assigned one of the following roles that provide write access at the subscription level:
- Owner
- Contributor
- Network Contributor
These roles grant the necessary permissions to enable and configure Traffic Analytics for the subscription.
In summary, the Reader role is insufficient as it only allows viewing existing resources. Owner, Contributor or Network Contributor privileges are required to make configuration changes like turning on the Traffic Analytics feature. The solution of assigning the Reader role to Admin1 will not meet the stated goal.
The Reader role only provides view access, which is not sufficient to enable Traffic Analytics. Write access through the Owner, Contributor or Network Contributor roles at the subscription scope is required. Assigning one of those roles to the Admin1 user would allow them to turn on this feature for the Azure subscription.
Microsoft AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft AZ-104 exam and earn Microsoft AZ-104 certification.