Exam SC-300 topic 4 question 1 discussion

correct. User 1 cannot as Global Admin are not allowed any access on custom attributes. Only Attribute Definition Administrator has. https://learn.microsoft.com/en-us/entra/fundamentals/custom-security-attributes-add?tabs=ms-powershell Secondly for user 2, it has received the role of Attribute Definition Administrator which does not have the permission to see values for any USERS. https://learn.microsoft.com/en-us/entra/fundamentals/custom-security-attributes-manage?tabs=admin-center if you see the comparision table, you will notice it there.

1) NO - By default, Global Administrator and other administrator roles do not have permissions to read, define, or assign custom security attributes. 2) NO - Attribute Definition Administrator role allows you to manage the definition of custom security attributes, meaning you can create, modify, and delete attribute sets and the attributes within them. However, it doesn't grant access to view or modify the values assigned to those attributes. User2 was set this role for SET1 == SECURE2 3) YES - Attribute Assignment Administrator can Read custom security attribute values for users