Examkin

Question

Difficulty: EasyUsers and Groups in Microsoft Entra ID

An administrator is configuring a new dynamic membership group in Microsoft Entra ID to automatically assign licenses to all employees in the Sales department. Which dynamic membership rule should the administrator use to target these users?

  1. (user.department -eq 'Sales')Answer
  2. B
    (device.department -eq 'Sales')
  3. C
    (user.department -eq Sales)
  4. D
    (user.department -ne 'Sales')

Answer

(user.department -eq 'Sales')
The correct rule is (user.department -eq 'Sales'). This rule correctly references the user object, queries the department attribute, utilizes the equality operator (-eq), and encloses the string value in single quotes as required by Microsoft Entra ID dynamic membership rule syntax.

Step-by-Step Solution

1
Identify the target object type.
The target objects are employees (users), which means the rule must query user attributes starting with 'user.' rather than device attributes starting with 'device.'.
We want to group users, not devices.
2
Identify the target attribute and operator.
The target attribute is 'department', and we need an exact match for 'Sales', which requires the '-eq' (equals) operator.
The '-ne' operator means 'not equal' and would exclude the target group.
3
Apply correct OData syntax formatting.
String values in dynamic membership rules must be enclosed in single or double quotes, resulting in the rule: (user.department -eq 'Sales').
Omitting quotes around string literals causes validation and evaluation errors.

Key Concept

Microsoft Entra ID dynamic group membership rules allow automatic management of group members based on user or device attributes using OData query syntax.
Estimated Time:45s
Rate this question

Topics

Users and Groups in Microsoft Entra ID

More questions from this topic