Examkin

Soru

Zorluk: KolaySelf-Service Password Reset and External Identities

You manage a Microsoft Entra ID tenant. You need to enable Self-Service Password Reset (SSPR) for a subset of users who belong to a group named SalesTeam.

Which configuration should you modify in the Microsoft Entra admin center to restrict SSPR to only these users?

  1. Set the SSPR enablement setting to Selected and choose the SalesTeam group.Cevap
  2. B
    Set the SSPR enablement setting to All, and then assign a custom Azure Role-Based Access Control (RBAC) role to the SalesTeam group.
  3. C
    Create an Administrative Unit containing the SalesTeam group and assign the group members the Helpdesk Administrator role.
  4. D
    Set the SSPR enablement setting to All, and configure SSPR authentication methods to require only a security question.

Cevap

Set the SSPR enablement setting to Selected and choose the SalesTeam group.
The correct option correctly states that SSPR enablement should be set to 'Selected' and the target group chosen. This limits the policy scope to members of that group.

Adım Adım Çözüm

1
Navigate to the Password Reset section in the Microsoft Entra admin center.
You reach the Properties blade for SSPR settings.
This blade controls the scope of users who can use Self-Service Password Reset.
2
Select the option to enable SSPR for 'Selected' instead of 'All' or 'None'.
A group selection option becomes available.
Choosing 'Selected' allows scoping SSPR to one specific group.
3
Browse and select the SalesTeam group, then save the changes.
SSPR is enabled only for members of the SalesTeam group.
This configuration directly satisfies the requirement to restrict SSPR to only the target subset of users.

Anahtar Kavram

Scoping Self-Service Password Reset (SSPR) to a specific group in Microsoft Entra ID.
Bu soruyu puanla

Konular

Self-Service Password Reset and External Identities

Bu konudan daha fazla soru