Configure Approval for Virtual Machine Creation in Azure Subscription
Question
You have an Azure subscription.
You activate Enterprise Mobility + Security E5 licenses for all users.
You need the users to request approval before they can create virtual machines.
What should you configure first?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.C
To require approval from users before they can create virtual machines, you can configure Azure role-based access control (RBAC) with a custom role and set up a request workflow using Azure AD entitlement management.
Here are the steps to configure this:
- Create a custom role in Azure RBAC that allows users to create virtual machines, but only with approval from a designated approver.
- Set up a workflow using Azure AD entitlement management that requires users to request the custom role to create virtual machines.
- Designate an approver or group of approvers who can approve or reject the request.
- Once the approver approves the request, the user will be granted the custom role to create virtual machines.
Based on the given options, the closest answer would be A. Azure Active Directory (Azure AD) conditional access policies. However, conditional access policies are typically used to control access to Azure resources based on certain conditions, such as location or device state, and may not be the most appropriate choice for this scenario.
Option B. Azure Active Directory (Azure AD) Authentication methods is not related to this scenario.
Option C. Azure Active Directory (Azure AD) Privileged Identity Management for the Azure resource roles, and Option D. Azure Active Directory (Azure AD) Privileged Identity Management for the Azure AD directory roles, are both related to managing privileged access to Azure resources and not directly relevant to this scenario.
Therefore, the best option would be to create a custom role in Azure RBAC and set up a request workflow using Azure AD entitlement management.
