Exam SC-300 topic 5 question 3 discussion

Question says to meet the Technical requirements, which are "License allocation for new users must be assigned automatically based on the location of the user." Therefore answer is Dynamic Security group (Admin unit cannot be used to assign license based on location). This is completed in the Azure AD Admin Centre

On exam 7/18/24, answered with "Administrative Units" and "Azure AD Admin Center" This meets the technical requirement "The helpdesk administrators must be able to manage licenses for only the users in their respective office."

Create an Administrative Unit and use the Azure AD Admin Center.

This is a tricky one. If you wanted to do this you would need to create a dynamic user group based on location and then manage that with an administrative unit. So what do you do FIRST, create the dynamic group. but that doesn't respond directly to the requirement of managing only users in their locations which would require the AU. I really don't know the right answer here.

• An Administrative Unit • Microsoft 365 admin center I am going with this as it is mentioned that helpdesk administrators should be able to manage the license only in their own office. Also MS 365 can be used to create admin units and assign license admin rold to HD administrator.

3 times in the Case Study is says they use the Microsoft 365 admin center. In the Microsoft 365 admin center, we can create AUs. Why would they jump over to Azure AD/Entra ID?

An Administrative Units Azure AD Admin Center

Given answer is correct. https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units "Administrative units restrict permissions in a role to any portion of your organization that you define. You could, for example, use administrative units to delegate the Helpdesk Administrator role to regional support specialists, so they can manage users only in the region that they support."

I think key is the statement "What should you create first", this makes the answer correct.

The administrative units is designed for role management rather than license management. Hence, the correct answer for Q1 is A Dynamic User Security Group. Refer to the article below. https://learn.microsoft.com/en-us/answers/questions/955831/can-licenses-be-directly-assigned-to-an-administra.html

The given Answer is correct. Q1: Administrative Units. This would limit the scope of admins as required. Q2: AAD Admin Center (not the on-prem Active Directory Administrative Center)

correct In the exam today