Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 59 discussion

Actual exam question from Microsoft's AZ-104
Question #: 59
Topic #: 2
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by juniorccs at May 19, 2022, 10:01 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
ltkiller
Highly Voted 2 years, 4 months ago
Selected Answer: B
B:No, when you create a new tenant, the creator is the only global admin and owner, he must first give access to others to allow anything. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-access-create-new-tenant#your-user-account-in-the-new-tenant
upvoted 29 times
...
pranavhalgekar
Highly Voted 2 years, 4 months ago
Tested. Ans is B. No Even if User4 is owner of subscription, he was not able to find new tenant created by user1 in Azure Active Directory > Manage Tenant.
upvoted 19 times
...
SeMo0o0o0o
Most Recent 1 month ago
Selected Answer: B
B is corerct
upvoted 1 times
SeMo0o0o0o
4 weeks ago
only User1
upvoted 1 times
...
...
MCLC2021
5 months ago
Selected Answer: B
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles MICROSOFT ENTRA ROLES Global Administrator:Manage access to all administrative features in Microsoft Entra ID, as well as services that federate to Microsoft Entra ID Assign administrator roles to others, Reset the password for any user and all other administrators. User Administrator: Create and manage all aspects of users and groups, Manage support tickets, Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators.
upvoted 1 times
...
raj24051961
1 year, 3 months ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles -Owner Full access to all resources Delegate access to others
upvoted 2 times
hebbo777
10 months, 2 weeks ago
i believe owner have full access in the tenant which associated with its subscription, there is no information about new tenant whether its associated with this subscription or not
upvoted 1 times
...
...
AK4U_111
1 year, 7 months ago
how can a tenant such as external.contoso.onmicrosoft.com even be created? i cant find anything on how to do this. when i go to create tenant i can create a new one but not a sub tenant which is a part of the original tenant
upvoted 1 times
...
tomasek88
1 year, 7 months ago
Selected Answer: B
NO = B --> because User4 has nothing to do with NEW Azure Active Directory tenant named external.contoso.onmicrosoft.com
upvoted 1 times
...
JayLearn2022
1 year, 7 months ago
There are several version of this question. The following are the valid and invalid solutions that may be presented. Valid Solution: Meets the Goal Solution: Solution: You instruct User1 to create the user accounts. Invalid Solutions: Does not Meet the Goal -Solution: You instruct User2 to create the user accounts. -Solution: You instruct User3 to create the user accounts. -Solution: You instruct User4 to create the user accounts.
upvoted 8 times
...
myarali
1 year, 7 months ago
Selected Answer: B
- NO After User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com, User-1 becomes owner and Global Administrator of external.contoso.onmicrosoft.com. BUT User-4 doesn't have any authorization in new tenant. SO User-1 can not instruct User4 to create the user accounts. MAYBE that can be done after User-1 assigns Global Administrator or User Access Administrator Role to User-4.
upvoted 1 times
...
zellck
1 year, 8 months ago
Selected Answer: B
B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/custom-overview#scope When you assign a role, you specify one of the following types of scope: - Tenant - Administrative unit - Azure AD resource
upvoted 1 times
...
cryptostud
2 years ago
This proves that answer to question 58 is No
upvoted 6 times
...
NaoVaz
2 years ago
Selected Answer: B
B) "No" Only the tenant creators receive by default the Owner role inside the tenant and therefore are able to create user accounts.
upvoted 4 times
...
EmnCours
2 years, 1 month ago
Selected Answer: B
Correct Answer: B
upvoted 1 times
...
EmnCours
2 years, 1 month ago
Selected Answer: B
Correct Answer: B
upvoted 1 times
...
Fatrat
2 years, 1 month ago
User 1, who created the new tenancy, will be appointed as Global Administrator. The other 3 users, who belong to the first tenancy, would need to be invited into the new tenancy and given correct permission by User 1.
upvoted 1 times
...
Aypumpin
2 years, 2 months ago
The answer is B
upvoted 1 times
...
Lazylinux
2 years, 3 months ago
B for sure What be forgotten is that Azure AD roles are used to manage access to Azure AD resources, whereas Azure roles are used to manage access to Azure resources. The scope of Azure AD roles is at the tenant level, whereas the scope of Azure roles can be specified at multiple levels including management group, subscription, resource group, resource. and hence Subscription owner has not access to AZ AD where as Azure Global Admin Can be granted owner of Azure subscription and not other way wrong
upvoted 5 times
...
Load full discussion...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel