Exam AZ-104 topic 2 question 90 discussion

Answer is B: "The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE." https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced#limitations-and-known-issues I could not find much information on the possibility of adding it to 'mail enabled' group.

Azure AD licenses can be assigned to user accounts. When you want to assign licenses to a group, the intention is to assign those licenses to the members of the group. You can assign licenses to Microsoft 365 groups and security groups, but not to mail-enabled security groups. Furthermore, the group should be security-enabled to get the licenses assigned. From the given list: Group1: Security group (Security Enabled) - You can assign licenses. Group2: Mail-enabled security group (Security Enabled) - You cannot assign licenses to mail-enabled security groups. Group3: Microsoft 365 group (Security Enabled) - You can assign licenses. Group4: Microsoft 365 group (Security Disabled) - You cannot assign licenses to security-disabled groups. The correct answer is: B. Group1 and Group3 only.

Given this information, Group2 (Mail-Enabled Security) is eligible for license assignment. Therefore, the correct groups for license assignment are Group1, Group2, and Group3. This aligns with option D: "Group1, Group2, and Group3 only." Key Takeaway: When assigning licenses in Azure AD, ensure that the groups are security-enabled. This includes standard security groups, mail-enabled security groups, and Microsoft 365 groups with security enabled.

sorry guys according to Microsoft documentation : If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing. https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide

Should be D, Group 1, 2 & 3 "The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE."

You can absolutely assign these licensed to mail enabled security groups. They shifted this to admin portal and I am able to assign my e5 licenses to a mail enabled security group

I prefer for D as Security Enabled is the key

License can be applied for only security groups or security-enabled Microsoft 365 (Unified) groups. https://techcommunity.microsoft.com/t5/microsoft-365/why-can-t-i-assign-licenses-to-every-groups-created-using-ms/m-p/2776552

B is correct Type: Security + Microsoft 365 Security: Enabled

Answer is B. Group 2(No) Because Azure AD does not support assigning licenses, including Azure AD Premium P2 licenses, to mail-enabled security groups. The group types that support licensing do not include mail-enabled security groups due to their hybrid nature and focus on email distribution. You cannot assign an Azure AD Premium P2 license to a Microsoft 365 Group with security disabled. Group 4 (No) Because the group must be a security principal (i.e., security-enabled) to support license assignment in Azure AD.

A prime example why AI should not be trusted: Gemini - Yes, you can assign licenses to mail-enabled security groups in Azure AD. ChatGPT: No, you cannot assign licenses to mail-enabled security groups in Azure Active Directory (Azure AD).

Based on the detailed information from reliable sources: To assign Azure Active Directory Premium P2 licenses, you can assign them to security groups and Microsoft 365 groups that have the securityEnabled property set to true. The groups eligible for license assignment include: Group1: Security group, Enabled. Group2: Mail-enabled security group, Enabled. Group3: Microsoft 365 group, Enabled. Group4: Microsoft 365 group, Disabled (Not eligible because it is disabled). Given these criteria, you can assign licenses to Group1, Group2, and Group3. Therefore, the correct answer is: D. Group1, Group2, and Group3 only

Types of Groups You Can Assign Licenses To Security Groups: Standard Security Groups: These are the most common types of groups used for managing access to resources. You can assign licenses to standard security groups. Mail-Enabled Security Groups: These groups function as both security groups and distribution lists. They can also be assigned licenses. Microsoft 365 Groups (formerly Office 365 Groups): These groups include collaboration features such as shared mailboxes, calendars, and document libraries. You can assign licenses to Microsoft 365 Groups.

https://techcommunity.microsoft.com/t5/microsoft-365/why-can-t-i-assign-licenses-to-every-groups-created-using-ms/td-p/2776552 "....License can be applied for only security groups or security enabled Microsoft 365 (Unified) groups....."

Correct answer is D. The key here is security enabled.

Security groups: Yes Microsoft 365 groups: Yes Mail-enabled security groups: No Distribution groups: No If the groups mentioned include any mail-enabled security groups, those cannot be assigned the Azure AD Premium P2 licenses.

Since Azure AD licenses typically require groups to have security enabled to manage memberships and assign licenses properly: Group1, Group2, and Group3 are eligible for the license assignments because they are security-enabled groups. Group4 cannot have licenses assigned directly since its security is disabled, meaning it does not manage security principals needed for direct license assignments. Therefore, the correct choice, based on the requirement that groups must have security enabled to receive Azure AD license assignments, is: D. Group1, Group2, and Group3 only