Exam AZ-500 topic 1 question 8 discussion

"You also have to make sure that the reviews can be reviewed by resource owners.". If you see here it's talking about "resource owners" and it no where in the question says that Access Review needs to be created for evaluation of groups. Hence the Answer C should be incorrect. Correct answer should be A, because different resources may have different owners, hence you can select accordingly as reviewer.

Answer: C, Group Owners Reason: When you want resource owners to review access, you should select "Group Owners" as the reviewer type. This ensures that the owners of the resources can review and manage access to their resources directly. Reference: https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review#select-reviewers

For configuring reviewers to ensure that reviews can be conducted by resource owners, you should set the Reviewers option to “Resource Owners” or “Group Owners”, depending on the access review solution you’re using. In many access review tools, assigning the resource or group owners as reviewers allows them to evaluate and approve access rights to their respective resources. This aligns with your requirement for resource owners to be the reviewers. If the available options specifically include “Resource Owners”, that would be the correct choice.

I am not really sure about the answer. The question says "the reviews can be reviewed by resource owners" not by "owner group"; "resource owners" should be different to "owner group members" Here: https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review - Group owner(s): This option is only available when you do a review on a team or group. I think the question is poorly phrased, I hope it won't be in exam worded like this.

Based on the task of configuring an access review where you want resource owners to review the access, the most appropriate choice for setting the Reviewers would be: C. Group Owners. Explanation: "Group Owners" refers to the owners or administrators of the groups or resources being reviewed. These individuals typically have the necessary permissions and authority to review and manage access to the resources. By setting the Reviewers to "Group Owners", you ensure that the access review will be performed by those who are directly responsible for the resources or groups being reviewed. This helps ensure that access permissions are accurately assessed and validated by the appropriate stakeholders.

You also have to make sure that the reviews can be reviewed by resource owners means Group owner .If we choose self we can chose someone who is not owner of group but in the condition it says we have to make sure the reviewers can be review by resource owners.

B. Members (Self). The question states" You also have to make sure that the reviews can be reviewed by resource owners." That implies that the review is a PIM review not Identity governance one - witch could be group or application not a resource. The options for Reviewers are "Selected users or groups", "Members(self)" or "Managers". Only "Members (self)" from the list is available option in PIM.

Answer: C Explanation: In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their own access. If the resource is a group, you can ask the group owners to review

C. Group Owners.

C. Group Owners.

Let me Clear it: there are two types of access reviews: AD role and RBAC. AD role access review are for just AD level and RBAC for resources(VM,storage, bla-bla). As question says resources owner does not mean groups. The correct ans is A.

I am going with C thinking someone has to have posed this question to their lecturer/intelligent person and that's why it's most voted

C. Group Owners.

I think the correct answer is A, because the question doesn't say the review source is a Group or Application. Therefore, you can assign a specific user for an application as a Reviewer while you can assign a Group Owner as a group resource. There is a little trick in the Q.

bit confused about this one. there is an 'Access Reviews' option under PIM (Privileged Identity Management) and the options there for reviewers are: Selected Users, Members (self), Manager see (step 14) below: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review

C is correct answer.

Correct