Examkin

Soru

Zorluk: OrtaAdministrative Units and License Management

Your company has a Microsoft Entra ID tenant that contains the following resources:
- An Administrative Unit named Sales-AU
- A security group named Sales-Group
- A user named User1 who is in Sales-AU and is a member of Sales-Group
- A user named Admin1 who is assigned the User Administrator role scoped to Sales-AU

You configure group-based licensing for Sales-Group. A Microsoft 365 E5 license is assigned to Sales-Group.

You discover that User1 is not assigned the license due to an empty usage location property.

You need to ensure that User1 is assigned the license. The solution must use the principle of least privilege.

What should you do?

  1. Have Admin1 configure the Usage location property on the user account of User1.Cevap
  2. B
    Configure a dynamic membership rule for Sales-Group that automatically assigns the usage location attribute to its members.
  3. C
    Assign the User Access Administrator Azure RBAC role to Admin1, and then have Admin1 configure the Usage location property on the user account of User1.
  4. D
    Assign the Contributor Azure RBAC role for the Sales-AU scope to Admin1, and then have Admin1 configure the Usage location property on the user account of User1.

Cevap

Have Admin1 configure the Usage location property on the user account of User1.
The correct action is to have Admin1 configure the Usage location property on the user account of User1. In Microsoft Entra ID, group-based licensing requires each user to have a usage location configured on their individual user object before a license can be assigned. Admin1 holds the User Administrator role scoped to Sales-AU, and since User1 is a member of Sales-AU, Admin1 has the necessary administrative permissions to update User1's properties without requiring tenant-wide administrator roles.

Adım Adım Çözüm

1
Identify the scope of the administrative delegation.
Admin1 is a User Administrator scoped to the Sales-AU administrative unit.
Understanding the administrative boundary helps determine who has permissions to modify User1, who is a member of Sales-AU.
2
Determine the root cause of the licensing error.
User1's license assignment failed because the usage location property is empty.
Microsoft Entra ID requires a usage location to be configured for any user before a license can be assigned.
3
Apply the principle of least privilege to resolve the error.
Admin1 updates the usage location property directly on User1's user account.
Admin1 already has the scoped User Administrator role for Sales-AU, allowing them to modify User1 without requiring tenant-wide administrative privileges or incorrect Azure RBAC assignments.

Anahtar Kavram

Delegating administration of user properties and licenses using Administrative Units and scoped directory roles.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Administrative Units and License Management

Bu konudan daha fazla soru