You want to delegate the ability to power on and power off session hosts to a helpdesk administrator team. You do not want to give them access to modify the host pool configuration or delete VMs. Which Azure RBAC role should you assign?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Virtual Machine Contributor

Powering on/off virtual machines is an Azure infrastructure operation. The Virtual Machine Contributor role grants permission to manage (start, stop, restart) virtual machines with...

๐Ÿ“‹Part of Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) ยท Azure Certification Practice
Real Exam ScenarioAzure Virtual Desktop Access control

You want to delegate the ability to power on and power off session hosts to a helpdesk administrator team. You do not want to give them access to modify the host pool configuration or delete VMs. Which Azure RBAC role should you assign?

โœ“ Correct Answer & ExplanationAzure Virtual Desktop Access control

Correct Answer

Virtual Machine Contributor

Why This Answer Is Correct

Powering on/off virtual machines is an Azure infrastructure operation. The Virtual Machine Contributor role grants permission to manage (start, stop, restart) virtual machines without granting administrative access to AVD resources (which would require Desktop Virtualization Contributor).

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Virtual Desktop Access control โ€” a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Access control is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.