HOTSPOT
A company uses Azure for several virtual machine (VM) and website workloads. The company plans to assign
administrative roles to a specific group of users. You have a resource group named GROUP1 and a virtual
machine named VM2.
The users have the following responsibilities:
You need to assign the appropriate level of privileges to each of the administrators by using the principle of
least privilege.
What should you do? To answer, select the appropriate target objects and permission levels in the answer
area.
Hot Area:
Answer: 
Explanation:
* Owner can manage everything, including access.
* Contributors can manage everything except access.
Note: Azure role-based access control allows you to grant appropriate access to Azure AD users, groups, and
services, by assigning roles to them on a subscription or resource group or individual resource level.
Role-based access control in the Microsoft Azure portal
http://azure.microsoft.com/en-us/documentation/articles/role-based-access-control-configure/
VM2 Owner
Group1 Reader
Group1 Contributor
https://equizzing.com/microsoft/you-need-to-assign-the-appropriate-level-of-privileges-to-each-of-the-administrators-by-using-the-principle-of-least-privilege/