You are an IT-administrator with Microsoft 365 E5 licenses assigned to your users. You are the owner of a subscription in Azure that consists of several resource groups. You need to enable a new employee to be able to manage and create all resources within one resource group, but he is not permitted to grant others access to the resource group or the resources within it. 
Which RBAC role should you assign him?

Answer options:

A.Owner-role on the subscription level
B.Owner-role on the resource group level
C.Contributor-role on the subscription level
D.Contributor-role on the resource group level 

Correct Answer: D 
You should assign the new employee the Contributor RBAC-role on the Azure resource group he is to manage. 

Option A is incorrect. This will give the user access to manage all aspects within the subscription AND assign roles within the subscription. The user should only manage one resource group. 
Option B is incorrect. This will give the user access to manager AND assign roles within the resource group. This is not permitted.
Option C is incorrect. This will give the user access to manage all aspects within the subscription. The user should only manage one resource group. 
Reference: 
To know more about the built-in RBAC roles, please refer to the link below: 

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles