AZ-104 Exam Dumps | You have 15 Azure subscriptions. You have an Azure AD tenant that contains a security group named Group1.

<< Prev Question Next Question >>

Question 166/235

You have 15 Azure subscriptions.
You have an Azure AD tenant that contains a security group named Group1.
You plan to purchase additional Azure subscriptions.
You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:
* Use the principle of least privilege.
* Minimize administrative effort.
What should you do?

A. Assign Group1 the Owner role for the root management group.

B. Create a new management group and assign Group1 the User Access Administrator role for the group.

C. Create a new management group and assign Group1 the Owner role for the group.

D. Assign Group1 the User Access Administrator role for the root management group.

Recent Comments (The most recent comments are at the top.)

sam - Sep 18, 2024

D) " Assign Group1 the User Access Administrator role for the root management group."

To be able to assign licenses to all current and future subscriptions, while minimizing the administrative effort, one should apply the role to the Root Management Group.

And because we should use the principle of least privilege we should chose the User Access Administrator role instead of the Owner one.

Question 166/235

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File