As an Azure consultant, for me, it is the best way to give the administrator access as you can manage the permission - including who can access Bastion.
Azure Bastion provides secure connections to virtual machines without internet access. Its management and permission control features are praised, and setup is efficient. Positive user experiences stem from its modern capabilities. Infrastructure teams benefit from runbook features. Limitations include charged data retrieval, inability to fix Windows boot issues, and better Edge compatibility. Protocol speed and file transfer limitations exist. Azure Bastion simplifies access with ease of use but requires consideration of certain challenges.