Question

A company has a resource group named 'rg-analytics' that contains several virtual machines. A new data analyst needs to be able to view and manage only the resources inside 'rg-analytics', without any access to other resource groups in the subscription. Following the principle of least privilege, how should you grant this access?

Accepted Answer

Assign the analyst the Contributor role scoped to the 'rg-analytics' resource group

Answer

Assign the analyst the Owner role scoped to the subscription

Answer

Add the analyst to the Global Administrator role in Microsoft Entra ID

Answer

Assign the analyst the Contributor role scoped to the subscription