Exam MS-102 topic 1 question 57 discussion

The Question with the right picture here: https://www.examtopics.com/discussions/microsoft/view/98896-exam-ms-100-topic-3-question-21-discussion/

Wrong picture?

A & E User admins can reset other User admins' passwords, and can delete other User admin accounts. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-perform-sensitive-actions

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-perform-sensitive-actions

The user admin can also do the following actions for users who aren't admins and for users assigned the following roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, Reports reader: • Manage usernames • Delete and restore users • Reset passwords • Force users to sign out • Update (FIDO) device keys

User Administrator cannot delete another User Administrator

The User Administrator role in Azure AD has permissions to manage users who are not assigned admin roles. This includes: Resetting passwords for non-admin users Deleting non-admin users Creating and managing groups Let's evaluate the answer choices for User5, who is a User Administrator: ✅ Correct Answers: B. Reset the password of User4 only. ✅ Correct. User4 has no admin role, so User5 can reset their password. A. Delete User2 and User4 only. ✅ Correct. User2 is a fellow User Administrator, and admins can delete other users who hold the same or lower admin role only if they are not Global Administrators. User5 cannot delete User3 (Global Admin), and User1 is an Exchange Admin, which is higher privilege than User Admin. _____________________________________________________________

Answer is correct and there is nothing wrong with the picture as well

Name Role ------------------------------ User1 Exchange administrator User2 User administrator User3 Global administrator User4 None

https://learn.microsoft.com/pt-br/training/modules/manage-roles-groups-microsoft-365/4-explore-admin-roles-microsoft-365 O administrador do usuário também pode concluir as seguintes ações: - Gerencie nomes de usuários. - Exclua e restaure usuários. - Redefina senhas. - Forçe usuários a sair. - Atualize as chaves do dispositivo (FIDO).

Correct Answer: E As a user administrator, user5 can manage regular user accounts, which includes resetting passwords and managing user attributes. However, the user administrator role does not grant permissions to delete users. Deleting users typically requires global administrator or equivalent privileges. Therefore, user5 cannot delete user2 and user4, as they lack the necessary permissions.

Correct Picture: User1, Exchange Administrator User2, User Administrator User3, Global Administrator User4, None You add another user named User5 to the User Administrator role. You need to identify which two management tasks User5 can perform Correct Answer: A, E

Tested in Lab, the correct answers are: A-E A. Delete User2 and User4 only. E. Reset the password of User2 and User4 only. Wrong: user admin can't: C. Reset the password of any user in Azure AD. there are some admin users that this role can't reset password D. Delete User1, User2, and User4 only. I tried to delete the exchange administrator and I got error F.Delete any user in Azure AD. I tried to delete the GA and I got error, this role can only delete non-admin users and other User Admins.

!!!!!!!! Wrong picture !!!!!!!!!!

Wrong picture

This doesnt match what's on the exam. There is a second image that should go with this.

A and E are correct.