A company's Microsoft Entra ID tenant contains a security group named Engineering-Dept. You assign a Microsoft 365 E5 license to Engineering-Dept. Several users in Engineering-Dept report that they cannot access Microsoft 365 services. When checking the license status, you find a 'License assignment error' state due to a missing usage location on the user objects. You need to resolve the licensing error and delegate the management of these users to a local administrator named Admin1. The solution must minimize administrative privileges and prevent Admin1 from managing users outside of Engineering-Dept. Which two actions should you perform? (Select two.)
- Create an administrative unit, add the members of Engineering-Dept to the administrative unit, and assign the User Administrator role to Admin1 scoped to the administrative unit.Cevap
- Update the Usage Location property on the user accounts of the affected members of Engineering-Dept.Cevap
- CAssign the User Administrator role to Admin1 at the Microsoft Entra tenant scope.
- DAssign the Owner role to Admin1 at the Azure subscription scope.
Cevap
Create an administrative unit, add the members of Engineering-Dept to the unit, assign the User Administrator role to Admin1 scoped to that unit, and update the Usage Location property on the affected user accounts.
To delegate administration under the principle of least privilege, you should group the target users into an administrative unit and assign the User Administrator role to the local administrator scoped to that unit. Additionally, because Microsoft Entra ID requires a usage location to assign licenses, setting the Usage Location property on the affected user accounts is necessary to resolve the license assignment error.
Adım Adım Çözüm
Anahtar Kavram
Delegating administrative permissions using Administrative Units and resolving group-based licensing requirements in Microsoft Entra ID.