Exam SC-300 topic 4 question 53 discussion

A. Role does not fit B. Blade does not exist C. Makes sense only if an access review would exist D: Easiest way: Azure AD roles -> Assignments Any other suggestions?

Answer: D. This blade is specifically designed to manage Azure AD roles, such as Cloud Application Administrator. In this blade, you can: View eligible and active assignments for each Azure AD role. Assign users to roles. Configure role settings and activation requirements.

To identify users that are eligible for the Cloud Application Administrator role, you would need to navigate to the Azure AD roles blade in Azure AD Privileged Identity Management (PIM). This is where all the Azure AD role assignments, including eligible and active users, are managed. In the Azure AD roles blade, you can: • View users who are assigned roles (either eligible or active). • Manage role assignments for Azure AD roles, such as the Cloud Application Administrator role. • Configure role settings like eligibility duration and activation requirements.

D, except the TAB is just called 'roles' now. It shows all the roles and the number of assigned/eligible, and you can click on them for more details.

B. Makes sense to me but the answer choice is confusing. Taken from the below Microsoft page "Browse to Identity governance > Privileged Identity Management > Groups." https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/groups-assign-member-owner

The Azure AD roles blade in the Privileged Identity Management settings allows you to manage Azure AD roles, including assigning roles to users and groups, and reviewing user and group eligibility for roles

To identify users eligible for the Cloud Application Administrator role using Azure AD Privileged Identity Management (PIM), you should use the "Azure AD roles" blade in the Privileged Identity Management settings (option D). Here's how you can do it: Go to the Azure portal (https://portal.azure.com). In the left-hand navigation pane, navigate to "Azure Active Directory." Under the "Security" section, select "Privileged Identity Management." On the Privileged Identity Management dashboard, select "Azure AD roles." In the list of roles, locate and select the "Cloud Application Administrator" role. In the "Eligible" tab, you can view the list of users who are eligible for the Cloud Application Administrator role.

D. Azure AD roles

Agree with Nils241