AZ104-Q: diagnose denied resource access
A user says they cannot start a VM. What is the most useful first Azure access check?
- A) Check the VM’s disk size.
- B) Assign Owner immediately.
- C) Review the user’s applicable role assignments and any deny assignment at the VM, resource-group, subscription, and management-group scopes. ✓
- D) Reboot the VM. Answer: C. Effective authorization depends on applicable assignments and denies across inherited scopes. Why not the others: The alternatives do not establish the cause of an authorization failure.
Related
rbac · role-assignment · scope