I have been looking at Azure Access control. I am trying to assign the role "Virtual Machine User Login"
to a user. I noticed that I can do this by clicking on the resource group or on the virtual machine itself.
I am assuming it is better to do it at the virtual machine level.
Is this how role assignment works? Do you assign roles at different levels?