Chapter 3, Managing Role-Based Access Control

1. You need to delegate some of the global administrator privileges to a new cloud engineer in your office. You decide to create a custom role using a JSON file and the following PowerShell cmdlet to add the custom role: New-AzureRmRoleDefinition -InputFile "C:\ARM_templates/customrole.json". Is this correct?
   1. Yes
   2. No
2. Your company has an Azure AD tenant and an on-premises AD that are synced using Azure AD Connect. You have one subscription called Packt_Main. The helpdesk administrators are members of the Packt_HD group. You need to grant the helpdesk group the permissions to reset user passwords using the Azure portal, while using the least amount of permissions. What should you do?
   1. Grant the Packt_HD group the password administrator role in Azure administrator
   2. Delegate password reset privileges to the Packt_HD group on the...