Answer-first summary for fast verification
Answer: Grant User1 the Access Administrator role for VNet1.
To allow User1 to assign the Reader role for VNet1 to other users, User1 needs the permission 'Microsoft.Authorization/roleAssignments/write'. This can be achieved by assigning the Access Administrator role, which provides the necessary permissions to add and remove role assignments. Removing User1 from existing roles or assigning broader roles does not specifically address this need. Therefore, the correct option is B: Grant User1 the Access Administrator role for VNet1.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In Subscription1, User1 with roles Reader, Security Admin, and Security Reader needs permission to assign the Reader role to others for VNet1 within RG1. What role assignment is required?
A
Change User1's role to Contributor for RG1.
B
Grant User1 the Access Administrator role for VNet1.
C
Reassign User1 with Contributor role for Subscription1 after removing Reader and Security Reader roles.
D
Give User1 the Network Contributor role for RG1.