A support operator can message, disconnect and sign out user sessions using Desktop Virtualization User Session Operator. The team now needs the operator to edit RemoteApp publication settings in one existing application group, without assigning users or administering unrelated pools. Which additional built-in role is the best fit at that application-group scope?

✓ Correct answer

• Desktop Virtualization Application Group Contributor.

Choose the application-group management role at the required scope. User Session Operator covers session operations; user/group assignment requires separate role-assignment authorization and is outside this scenario. Option explanations: A. Desktop Virtualization Application Group Contributor.: This role manages application-group configuration, including publication, but does not grant user/group role assignment. B. Desktop Virtualization Session Host Operator.: This role manages session-host operations, not the required application-group publication. C. Desktop Virtualization Application Group Reader.: This role can view the group but cannot edit its publication settings. D. Desktop Virtualization User.: This grants use of published resources rather than administrative publication changes. Sources: Built-in Azure RBAC roles for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac

Read the source reference