Explanation
Graphical user interface, application, table Description automatically generated

Box 1: User2
Graphical user interface, application, table Description automatically generated

Note:
Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery Services vault and giving access to others. Imagine this role as admin of backup management who can do every backup management operation.
Box 2: User3
The User Access Administrator role lets you manage user access to Azure resources.
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Explanation

In a Hybrid-IT scenario, Active Directory from on-premises can be extended to serve as the authentication mechanism through an Azure deployed domain controller (as well as potentially using the integrated DNS).
It is important to distinguish between traditional Active Directory Servers and Microsoft Azure Active Directory that provides only a subset of the traditional on-premises AD offering. This subset include Identity and Access Management, but does not have the full AD schema or services that many 3rd party application take advantage of. While Azure Active Directory IS a requirement to establish authentication for the Azure virtual machines in use, and it can synchronize users with customers' on-premises AD, the two are explicitly different and customers will likely continue to require full Active Directory servers deployed in Microsoft Azure.
References:
https://www.suse.com/media/guide/sap_hana_on_azure_101.pdf

Explanation

Box 1: Yes
To configure Azure AD single sign-on with SAP HANA, perform the following steps:
1. In the Azure portal, on the SAP HANA application integration page, select Single sign-on.
2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.

Box 2: No
Box 3: No
Key security considerations for deploying SAP on Azure
References:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial

With Availability Zones, Azure offers industry best 99.99% VM uptime SLA.
References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs