Exam AZ-500 topic 5 question 59 discussion

1. yes - Helpdesk Administrator can reset password for non-administrators. 2. no - Group Admin cannot reset password from any user. 3. no - Password Administrator cannot reset password from User Administrator. Ref: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords

I think it should be 1. Yes Admin 1 is a Helpdesk Administrator and can reset passwords for non-administrators and Helpdesk Administrators. It will work as both are in the same admin unit 2. No Admin 2 is a group admin and cannot reset passwords from any user and definitly not in the other admin unit 3. Yes Admin 3 is a password admin in the same admin unit

Admin 2 is Group Admin and does not have permission for password reset. However, Admin 1 and Admin 3 are Helpdesk admin and Password admin. They can therefore reset passwrds. It should be YNY https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords

Yes,No,Yes 1- Yes Admin1 is Helpdesk Administrator can reset password of users and other Help Desk admins only. In the box 1 one questions asks can helpdesk administrator reset password for User1 who Helpdesk administrator is also. Yes, he/she can! 2-No Admin 2 is group administrator question asks can he reset password of Password Administrator? Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports. So here No. 3-No In the 3rd box it asks can Password Administrator reset the password of User Administrator? Password Administrators can reset passwords for non-administrators and Password Administrators Ref: Microsoft Entra built-in roles - Microsoft Entra ID | Microsoft Learn

YNN 1. Yes Admin1 is helpdesk admin he can reset password for non admin users 2. No Admin2 is a group admin he can't reset password, and he is not in the same AU than user3 3. No Password admin can rester password for non admin and password admin only

Explanation: 1. yes - Helpdesk Administrator can reset password for non-administrators.2. no - Group Admin cannot reset password from any user.3. no - Password Administrator cannot reset password from User Administrator. Reference: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-resetpasswords

YNN, in exam 4th November.

y, n ,n FROM MICROSOFT: HELPDESK ADMINS: Can reset passwords for non-administrators and Helpdesk Administrators. GROUP ADMINS: Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports. PASSWORD ADMINS: Can reset passwords for non-administrators and Password Administrators.

Password Administrator: Can reset passwords for non-administrators and Password Administrators only.

Y = HELPDESK ADMINS CAN RESET THE PASSWORDS OF USERS (NON-ADMIN ONLY) N = GROUP ADMINS CANNOT RESET PASSWORDS N = PASSWORD ADMIN CANNOT RESET PASSWORD OF USER ADMIN

Yes,NO,NO Helpdesk Administrator Can reset passwords for non-administrators and Helpdesk Administrators. Groups Administrator Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports.

YNN is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Helpdesk Administrator - Can reset passwords for non-administrators and Helpdesk Administrators. Password Administrator - Can reset passwords for non-administrators and Password Administrators.

YNY https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords

Its amazing how many incorrect answers are being propagated in this paid, contributor edition. I agree with marpengar1's answer. Fact-check everything with supporting evidence. Please check on this link which is the basis for my answers. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords 1. YES. Admin1 is a helpdesk administrator in AU1 just like user1. A helpdesk admin can reset a user with no admin role such as a user1. 2. NO. Admin2 is a groups admin in AU1 and user 3 is in AU3. According to the link, Admin2 doesn't have the privileges to reset passwords and they are in a different admin unit compared to user3. 3. NO. Admin3 is a password admin in AU2 and Admin4 is in AU2. They are both in the same AU. However, password admins do not have ability to reset the password of a user with admin privileges.

Y: helpdesk admins can reset password within their AU except for admin passwords N: Admin2 can't reset any password. Groups admin doesn't grant that right and Admin2 is not even scoped to the same AU as User3 anyway... N: Password admins can't reset the password of another admin. Only User Admins can https://learn.microsoft.com/en-us/azure/active-directory/roles/admin-units-assign-roles#roles-that-can-be-assigned-with-administrative-unit-scope

YES NO NO

in summary Y,N,N https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords