Câu 11: SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You have an Azure management group named MG1 that contains two subscriptions named Sub1 and Sub2. Both subscriptions are linked to a Microsoft Entra tenant that contains a security group named Group1. You need to ensure that the members of Group1 can assign roles to the resources in Sub1 and Sub2. The solution must follow the principle of least privilege. Which role should you assign to Group1?

1. A. Contributor at the MG1 scope
2. B. Contributor at the Sub1 and Sub2 scopes
3. C. User Access Administrator at the MG1 scope — đáp án hiện tại
4. D. Owner at the MG1 scope