AZ-104 - Microsoft Azure Administrator Study Notes
Manage Azure identities and governance RBAC Roles Contributor Full access to manage Azure resources Cannot assign roles in Azure RBAC Owner Full access to manage Azure resources Can assign roles to other users in Azure RBAC Reader Can view resources but cannot make changes User Access Administrator Can manage user access to Azure resources There is a limit of 2000 custom roles per tenant devtest labs user role only lets you connect, start, restart and shutdown virtual machines in azure devtest labs. You can assign custom roles to users, groups, and service principals at management group, subscription, and resource group scopes. Custom roles can be shared between subscriptions that trust the same Microsoft Entra tenant. There is a limit of 5,000 custom roles per tenant. (For Microsoft Azure operated by 21Vianet, the limit is 2,000 custom roles.) Custom roles can be created using the Azure portal, Azure PowerShell, Azure CLI, or the REST API. Azure Policy Used to ensure Azure resou...