Question

You have an Azure subscription called IM-Sub1. The subscription contains a virtual network called IM-VNet1 with a subnet called subnet0. Subnet0 contains a load balancer named IM-ILB1. There are three virtual machines in a backend pool behind IM-ILB1. All resources are located in a single resource group named IM-RG1.

What role and scope allows an administrator to modify the backend pool of IM-ILB1? This role must not grant any extra privileges.

Answer 1

The Network Contributor role with scope set to either the load balancer itself, the subnet, or the resource group is necessary for an administrator to modify the backend pool of IM-ILB1 without extra privileges.

Step-by-step explanation:

To modify the backend pool of the load balancer IM-ILB1 in Azure subscription IM-Sub1, an administrator would require a specific role with the necessary permissions. The most suitable role that allows modifications to a load balancer's backend pool without granting extra privileges is the Network Contributor role. This role would have the scope set to either the specific load balancer, the subnet, or the resource group containing the load balancer, depending on what level of access is appropriate. If only IM-ILB1 modifications are required, then the scope could be set solely on the load balancer itself.