You need to delegate password reset permissions for a specific subset of users in your Microsoft Entra ID tenant by using an administrative unit. Which sequence of steps should you perform to complete the delegation? To answer, arrange the actions in the correct order.
- 1Create an administrative unit in the Microsoft Entra admin center.
- 2Add the target users to the administrative unit.
- 3Assign the Helpdesk Administrator role to the delegated administrator, scoped to the administrative unit.
Answer
The correct sequence is to first create the administrative unit in the Microsoft Entra admin center, then add the target users to the administrative unit, and finally assign the Helpdesk Administrator role to the delegated administrator scoped to the administrative unit.
To delegate management of a specific subset of users, you must first establish the scope boundary by creating an administrative unit. Next, you populate the administrative unit by adding the target users. Finally, you assign the administrative role to the delegated administrator with the scope restricted to that administrative unit. This ensures the administrator's capabilities are limited to the members of the administrative unit.
Step-by-Step Solution
Key Concept
Delegation of administrative roles using administrative units as scopes