Exam SC-300 topic 4 question 3 discussion

Correct (B - User3 only)

B is correct https://learn.microsoft.com/en-us/training/modules/plan-implement-manage-access-review/2-plan-for-access-reviews

Ask an authorized user to review a guest's access to an application You can ask an authorized user, such as the owner of an application, to review guest's need for continued access to the application. https://learn.microsoft.com/en-us/entra/id-governance/manage-guest-access-with-access-reviews#ask-an-authorized-user-to-review-a-guests-access-to-an-application

If you set Select reviewers to Users review their own access or Managers of users, B2B direct connect users and Teams won't be able to review their own access in your tenant. The owner of the Team under review will get an email that asks the owner to review the B2B direct connect user and Teams. https://learn.microsoft.com/en-us/entra/id-governance/create-access-review

The correct answer is B. User3 only. According to the Microsoft Entra article on creating an access review of groups and applications1, when you select Members (self) as the reviewers, each user reviews their own access to the group or application. Therefore, in this scenario, only User3 can perform the access review for their own access to Group1. User1 and User2 cannot perform the access review for User3, even though User1 is the owner of Group1.

B. User3 only

B. User3 only

Self Access reviews are like marking your own homework.

- When Reviewers is set to Members (Self), then only each individual member can review their own access, and if they do not then it is reported as no response - [https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review](https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review) - [https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review](https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review)

When members are required to perform a self-review, there will only be one user showing in the "Overview" to review so only User3 will be able to review himself.

just pass the exam today. This came in the question.

On the exam 1/20/2022

why User1 can't perform access reviews??

Azure AD Premium P2 • Guest users who are assigned as reviewers. • Guest users who perform a self-review • Guest users as group owners who perform an access review. • Guest users as application owners who perform an access review. • Member users who are assigned as reviewers • Member users who perform a self-review • Member users as group owners who perform an access review • Member users as application owners who perform an access review

Correct - B