Soru

Zorluk: KolayAdministrative Units and License Management

You need to delegate password reset permissions for a specific subset of users in your Microsoft Entra ID tenant by using an administrative unit. Which sequence of steps should you perform to complete the delegation? To answer, arrange the actions in the correct order.

  1. 1Create an administrative unit in the Microsoft Entra admin center.
  2. 2Add the target users to the administrative unit.
  3. 3Assign the Helpdesk Administrator role to the delegated administrator, scoped to the administrative unit.

Cevap

The correct sequence is to first create the administrative unit in the Microsoft Entra admin center, then add the target users to the administrative unit, and finally assign the Helpdesk Administrator role to the delegated administrator scoped to the administrative unit.
To delegate management of a specific subset of users, you must first establish the scope boundary by creating an administrative unit. Next, you populate the administrative unit by adding the target users. Finally, you assign the administrative role to the delegated administrator with the scope restricted to that administrative unit. This ensures the administrator's capabilities are limited to the members of the administrative unit.

Adım Adım Çözüm

1
Create the administrative unit in Microsoft Entra ID.
An administrative unit is created to act as the boundary for delegated permissions.
The container must exist before members can be added or roles can be scoped to it.
2
Add the target users to the administrative unit.
The target users are members of the administrative unit.
Members must be in the administrative unit so that the delegated administrator's scoped permissions apply to them.
3
Assign the Helpdesk Administrator role to the delegated administrator with the administrative unit as the scope.
The delegated administrator receives helpdesk permissions only for the members of the administrative unit.
This step applies the role assignment to the delegated admin, restricting their authority to the defined administrative unit scope.

Anahtar Kavram

Delegation of administrative roles using administrative units as scopes
Bu soruyu puanla