
Explanation:
Box 1: No
User1 has the Virtual Machine Local User login role with scope RG1.
The role is not correct.
The Virtual Machine User Login role would be OK.
Box 2: Yes
User2 has a correct role: The Virtual Machine User Login role.
The Device is Windows 11, which is fine.
The Device does not have to been Entra joined or Entra registered.
Box 3: No
Not possible from an Android device.
Note:
Enable Microsoft Entra login for a Windows VM in Azure
To use Microsoft Entra login for a Windows VM in Azure, you must:
1. Enable the Microsoft Entra login option for the VM. [we can assume this has been configured]
2. Configure Azure role assignments for users who are authorized to sign in to the VM.
Reference:
https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows
https://learn.microsoft.com/en-us/azure/virtual-desktop/azure-ad-joined-session-hosts