High Availability Built into Azure SQL Data Warehouse

B

In the context of Azure Virtual Desktop, the correct answer for granting permissions to its resources is B. role-based access control (RBAC) roles.

Role-based access control (RBAC) is a fundamental security mechanism in Microsoft Azure that allows you to manage access to Azure resources. RBAC provides fine-grained access control by assigning roles to users, groups, service principals, or managed identities. These roles determine what actions can be performed on Azure resources and what level of access users have.

When it comes to Azure Virtual Desktop, RBAC is used to control access to various resources associated with it, such as host pools, session hosts, application groups, and workspace configurations. RBAC allows you to grant specific permissions to users or groups at different levels, ensuring that they can perform necessary tasks without granting excessive privileges.

Here's how RBAC works in the context of Azure Virtual Desktop:

1. Role Definitions: Azure provides built-in roles specific to Azure Virtual Desktop, such as Virtual Machine Contributor, Virtual Machine User, and Virtual Machine Administrator Login. These roles define the set of permissions that can be assigned to users or groups.

2. Role Assignment: Once the roles are defined, you can assign them to users or groups. Role assignments are made at the scope of the resource or resource group. For example, you can assign a specific role to a user at the resource group level, giving them access to all the Azure Virtual Desktop resources within that group.

3. Permissions and Access: RBAC roles for Azure Virtual Desktop determine the actions that users can perform on the resources. These actions may include creating, modifying, or deleting host pools, managing session hosts, configuring application groups, and so on. By assigning appropriate roles, you can ensure that users have the necessary permissions to carry out their tasks without granting unnecessary access.

In summary, RBAC roles are used to grant permissions and control access to Azure Virtual Desktop resources. They provide a flexible and secure way to manage user privileges, ensuring that users have the right level of access to perform their tasks within the Azure Virtual Desktop environment.

The correct answer is B. Role-Based Access Control (RBAC) roles.

Role-Based Access Control (RBAC) is a security system used in Azure to control access to resources based on the roles assigned to users or groups. It enables administrators to manage access to Azure resources, such as Virtual Desktop resources, by assigning roles to users or groups. These roles are defined with a set of permissions that determine what actions the user or group can perform on the resource.

RBAC can be used to grant permissions to various Azure resources, including Virtual Desktop resources. This includes permissions to create, update, delete, or read Virtual Desktop resources, as well as permissions to manage the Virtual Desktop infrastructure.

Tags are labels that can be applied to Azure resources to help organize and identify them. They are not used to grant permission to resources.

Resource groups are containers used to manage and organize Azure resources. They can be used to manage access to resources, but they are not used to grant permission to resources.

Application Security Groups are used to manage network security in Azure. They can be used to create network security rules that allow or deny traffic to Virtual Desktop resources, but they are not used to grant permission to resources.

Therefore, B. Role-Based Access Control (RBAC) roles are used to grant permission to Azure Virtual Desktop resources.