A botanical-garden ticketing crew only needs to start and restart VMs in one resource group after an intern with Contributor deleted a public IP. Which assignment best restores least privilege for that crew?
Select an answer to reveal the explanation.
Short Explanation
Contributor is a master key that also opens the networking closet—hence the missing public IP. Virtual Machine Contributor is the job-function key for start/restart without the extra write actions that wiped the garden’s address.
Full Explanation
Job-function built-in roles such as Virtual Machine Contributor grant the actions needed to operate VMs without the broad Microsoft.Resources write surface of Contributor or Owner. Prefer service-specific roles at the required scope over privileged administrator roles when the workload is narrowly defined.