A regional compost authority created a custom role with AssignableScopes listing only subscription A, then could not assign it in subscription B in the same tenant. Which statement correctly describes AssignableScopes?
Select an answer to reveal the explanation.
Short Explanation
AssignableScopes is the fence line around where you are allowed to hang that custom role badge. Fence only subscription A, and subscription B is outside the pasture—you cannot point the fence at tenant root '/' or sprinkle wildcards either.
Full Explanation
AssignableScopes declares the scopes at which a custom Azure role definition may be assigned. It cannot be the tenant root '/' and cannot include wildcards. Roles that include DataActions also cannot be assigned at management-group scope, which reinforces careful scope planning per subscription or resource group.