
Explanation:
Box 1: dataActions
To ensure that users can sig in to virtual machines that are assigned role1, modify the
"dataActions" section.
Box 2: assignableScopes
To ensure that role1 can be assigned only to a resource group named RG1, modify the
"assignableScopes" section.
The following dataActions are required:
- Microsoft.Compute/virtualMachines/login/action
- Microsoft.Compute/virtualMachines/loginAsAdmin/action
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in- roles?source=recommendations#virtual-machine-administrator-login