How can administrators manage user access in Azure Virtual Desktop?

Administrators can effectively manage user access in Azure Virtual Desktop by assigning users to application groups. This approach allows for granular control over which users have access to specific applications within the Azure Virtual Desktop environment. Application groups are essential in determining what resources are available to users based on their needs and roles within the organization.

By utilizing application groups, administrators can ensure that users only see and have access to the applications they require for their work. This enhances security and simplifies resource management, as it centralizes the configuration of access rights and reduces the risk of unnecessary exposure to applications that are not relevant to certain users.

The other choices, while related to general administration and security practice, do not directly address the management of user access in the Azure Virtual Desktop context. For example, creating new users in a database pertains to user management at a basic level but doesn’t involve direct access control within the Azure Virtual Desktop environment. Limiting IP address access is more focused on network security rather than application-specific access. Installing security updates is critical for maintaining the health of the system but does not directly manage how users access applications. Thus, assigning users to application groups is the most relevant method within this context for managing user access.