You have an azure subscription named sub1 that contains a virtual machine named vm1 in a resource group named rg1. you assign the following permissions:
• reader role to a user named user1 on sub1
• owner role to a user named user on rg1
• reader role to a user named user3 on vm1
• owner role to a user named user4 on vm1 another administrator named admini plans to reduce the permissions on vm1.
from vm1, which two permissions can be removed by admin1?
a) permissions assigned to user1
b) permissions assigned to user2
c) permissions assigned to users