Microsoft Azure Fundamentals AZ-900 — Question 375

Azure role-based access control (RBAC) roles are used to grant permissions to Azure Virtual Desktop resources such as host pools, application groups, and workspaces. Tags, resource groups, and application security groups do not grant permissions.