Question

Your company has a resource group named RG-Finance that contains several virtual machines. A new team member, Dana, needs to be able to start, stop, and restart all virtual machines in RG-Finance, but must NOT be able to create or delete VMs, modify VM configurations, or manage any other resource types in the resource group. You want to follow the principle of least privilege using built-in roles only. What should you do?

Accepted Answer

Assign Dana the DevTest Labs User role at the RG-Finance scope

Answer

Assign Dana the Virtual Machine Contributor role at the RG-Finance scope

Answer

Assign Dana the Contributor role at the RG-Finance scope

Answer

Assign Dana the Virtual Machine User Login role at the RG-Finance scope