Exam MS-101 topic 2 question 138 discussion

Box 1 : admin1 & admin 2 Box2: admin4 only Ref 1 :https://www.examtopics.com/discussions/microsoft/view/100788-exam-ms-500-topic-1-question-83-discussion/ Ref 2: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide#before-you-begin "Turning on role-based access control will cause users with read-only permissions (for example, users assigned to Azure AD Security reader role) to lose access until they are assigned to a role."

Initially, only those with Azure AD Global Administrator or Security Administrator rights will be able to create and assign roles in the Microsoft 365 Defender portal, therefore, having the right groups ready in Azure AD is important. Turning on role-based access control will cause users with read-only permissions (for example, users assigned to Azure AD Security reader role) to lose access until they are assigned to a role. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide Answers are correct, essentially anyone with reader access, loses it when RBAC is introduced.

Answers provided are correct: 1) See https://learn.microsoft.com/en-us/microsoft-365/security/defender/manage-rbac?view=o365-worldwide#before-you-start 2) See https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide#before-you-begin -> Admin5 wouldn't have access in the first place, so wouldn't lose it through RBAC activation.