[&] Which of the following operations are management plane (executed through the management API)? (Select all that apply)
- Add a table to an Azure SQL Database
- Delete a virtual network -- Correct
- Set a network security group rule -- Correct
- Provision a virtual machine -- Correct

[&] Bob in research needs the ability to create and manage some resources, such as virtual machines and virtual networks.  What should you do to meet Bob's requirements without violating the concept of least required rights?  Choose the solution that requires the least administrative effort.
- Assign the Owner role to Bob on the subscription
- Provision a resource group for Bob. Assign the Contributor role to Bob on the resource group -- Correct
- Assign the contributor role to Bob on the main production resource group
- Assign the Global Admin role to Bob in the Azure AD client