You have a Microsoft Entra tenant linked to an Azure subscription named Subscription1. The tenant contains a user named User1. Subscription1 contains the following hierarchy of Azure resources: A Tenant Root Group management group Subscription1 in Tenant Root Group A resource group named RG1 in Subscription1 A virtual machine named VM1 in RG1 For which Azure resources can you assign User1 the Virtual Machine User Logon role?

Respuesta :

Explanation:

In Azure, the "Virtual Machine User Login" role (assuming you meant "Virtual Machine User Login" instead of "Virtual Machine User Logon") is typically assigned at the resource group or resource level. However, as of my last knowledge update in January 2022, the exact role names and scopes might have changed.

For your scenario:

1. **VM1 (Virtual Machine):** You can assign the "Virtual Machine User Login" role directly to User1 at the VM level.

2. **RG1 (Resource Group):** You can assign the "Virtual Machine User Login" role to User1 at the resource group level, granting access to all resources within RG1.

3. **Subscription1 (Subscription):** You can assign the role at the subscription level, allowing User1 to log in to all resources within Subscription1, including VM1 and other resources in RG1.

It's important to note that the specific role names and available roles can change, so it's recommended to check the Azure portal for the most up-to-date information on roles and their scopes.