Exam AZ-500 topic 2 question 69 discussion

We need to assign the Subscription on the tenant

C, When you create a new Azure subscription, it is associated with an Azure AD tenant. If the synced on-premises user accounts cannot be assigned roles in the new subscription, it might be because the Azure AD tenant associated with the new subscription is not the same as the one you've been synchronizing with using Azure AD Connect. Changing the Azure AD tenant to match the one you've been synchronizing with will allow you to assign roles to synced user accounts correctly.

To assign roles to synced on-premises user accounts in the new subscription, the subscription must use the same Azure AD tenant as the one where those accounts exist. If the synced on-premises user accounts belong to a different Azure AD tenant than the one used by the new subscription, those accounts cannot be assigned roles in the subscription.

Option C: Change the Azure AD tenant used by the new subscription means switching to a different Azure AD tenant. This would not solve the issue because the new tenant would not have the synced on-premises user accounts from your original Azure AD tenant. The correct approach is to ensure that the new subscription recognizes the synced user accounts from your existing Azure AD tenant. This is achieved by: Option D: Configure a second instance of Azure AD Connect. This ensures that the new subscription is properly synced with the on-premises Active Directory, allowing the user accounts to be assigned roles.

C. Change the Azure AD tenant used by the new subscription.

C is the answer. https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

C. Change the Azure AD tenant used by the new subscription.

C - Correct

Answer is correct

You create a new Azure subscription. Hence you need to assign. These questions something are tricky. Go over every answer and try to backtrack if it triggers an earlier statement.

someone please explain

I didn't understand this

Answer is correct