AZ104-Q: delegate subscription administration
A platform team must create resource groups and resources across one subscription but must not manage access assignments. Which built-in role best fits?
- A) Contributor at the subscription scope. ✓
- B) Owner at the management-group scope.
- C) Global Administrator in Entra ID.
- D) Reader at every resource group. Answer: A. Contributor can manage resources but cannot grant access through role assignments. Why not the others: Owner and Global Administrator are broader; Reader cannot create resources.
Related
subscription · rbac · scope