Azure RBAC for AVD Quiz

What you'll be asked

1. Which Azure RBAC role should be assigned to a user to allow them to launch their assigned desktop and applications in Azure Virtual Desktop?
2. An administrator needs to delegate the ability to manage host pools, application groups, and workspaces without granting them full owner rights to the entire subscription. Which role is most appropriate?
3. You are troubleshooting a session host issue. You need to grant an IT support staff member the ability to power on/off and restart virtual machines in a host pool, but they should not have access to manage the host pool configuration. What is the most granular approach?
4. Which Azure RBAC role is required for the Azure Virtual Desktop service principal to successfully join a virtual machine to an Active Directory domain using the Domain Join extension?
5. A security auditor requires the ability to view all AVD configuration settings (host pools, scaling plans, and app groups) but must not be able to change any settings or access user sessions. Which role should be assigned at the Resource Group level containing the AVD resources?

Answers and explanations come after you submit.