You have an Azure subscription named Project1. Only a group named Project1admins is as-signed roles in the Project1 subscription. The Project1 subscription contains all the resources for an application named Application1.

Your company is developing a new application named Application2. The members of the Ap-plication2 development team belong to an Azure Active Directory (Azure AD) group named App2Dev.

You identify the following requirements for Application2:

• The members of App2Dev must be prevented from changing the role assignments in Azure.
• The members of App2Dev must be able to create new Azure resources required by Application2.
• All the required role assignments for Application2 will be performed by the members of Project1admins.

You need to recommend a solution for the role assignments of Application2.

Solution: Create a new Azure subscription named Project2. Assign Project1admins the User Access Administrator role for the Project2 subscription. Assign App2Dev the Owner role for the Project2 subscription.

Does this meet the goal?

A. Yes

B. No