Examkin

Soru

Zorluk: OrtaUsers and Groups in Microsoft Entra ID

Your organization has a Microsoft Entra ID tenant. A security group named Sales-Group has its membership type set to Assigned. A user named User1 is configured as the owner of Sales-Group and does not hold any directory roles. You need to configure Sales-Group to dynamically include users based on their department.

Can User1 change the membership type of Sales-Group to Dynamic User?

Cevap: Cevap

Cevap

No, User1 cannot change the membership type of Sales-Group to Dynamic User because group owners without administrative directory roles do not have permissions to modify group membership types.
Group owners are permitted to manage group membership (adding/removing users) and update group settings (like description or name) for the groups they own. However, changing a group's membership type (e.g., from Assigned to Dynamic User or Dynamic Device) requires specific administrative directory roles such as Global Administrator or Groups Administrator. Since the user does not hold any directory roles, they cannot change the membership type.

Adım Adım Çözüm

1
Analyze the roles and permissions of the user.
User1 is a group owner but does not hold any Microsoft Entra ID directory roles.
Determine what actions the user can perform in the tenant.
2
Identify the required permissions to change group membership type from Assigned to Dynamic.
Changing the membership type of a group requires the Global Administrator or Groups Administrator directory role.
Compare the required administrative roles against the user's roles.
3
Evaluate if the group owner can perform the change.
Since User1 only has group owner permissions and no administrative roles, the action is blocked.
Make the final determination on the statement.

Anahtar Kavram

Group ownership permissions and membership type management in Microsoft Entra ID
Bu soruyu puanla

Konular

Users and Groups in Microsoft Entra ID

Bu konudan daha fazla soru