Exam MS-102 topic 1 question 54 discussion

I think is Y,Y,Y. "If an administrator forgets their own password, ...": "Ask another administrator to reset it for you. In this case, the other administrator must be either a Global admin, a User Management admin, or a Password admin. However, if the administrator who forgot their password is a Global admin, another Global administrator must reset it for them." https://learn.microsoft.com/es-es/training/modules/manage-secure-access-microsoft-365/2-manage-user-passwords

N,Y,N https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/manage-roles-portal?tabs=admin-center#roles-that-can-be-assigned-with-administrative-unit-scope https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-overview#scope

N Y N https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords

Based on the image and the provided information, here are the correct answers: User1 can reset the password of User3. Answer: No User1 is a Password Administrator for AU1 and AU2, but User3 is not a member of AU1, and although User3 is in AU2, User1 is not a User Administrator for AU2, and Password Administrators cannot reset passwords of users outside their scope unless they are also User Administrators. User2 can update the display name of User1. Answer: No User2 is a User Administrator for AU1, and both User1 and User2 are members of AU1. However, a User Administrator cannot manage other administrators, which includes User1, who is a Password Administrator. User1 can reset the password of User2. Answer: Yes User1 is a Password Administrator for AU1, and both User1 and User2 are in AU1. Therefore, User1 can reset the password of User2. Final Answers: User1 can reset the password of User3: No User2 can update the display name of User1: No User1 can reset the password of User2: Yes _________________________________________________________

No,Yes,Yes

Ignore my last comment, I decided to do a real test, and it is N, N, Y. I could see User3's account, but when I tried to reset I was told I don't have the permissions, the display name did not have any configuration options for any of the accounts, and I was able to successfully reset user2's password.

Its Y, N, Y User1 can reset the password of User3? Yes. User1, as a Password Administrator for AU2, can reset the password of User3, who is in AU2. User2 can update the display name of User1? No. User2 is a User Administrator for AU1, and while User1 is in AU1, the User Administrator role does not have permissions to update the display names of other administrators. User1 can reset the password of User2? Yes. User1, as a Password Administrator for AU1, can reset the password of User2, who is in AU1

NYN is correct, as Password admin role is described bellow Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators. https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide

Correct: Password Administrator Can reset passwords for non-administrators and Password Administrators.

Correct, password admin can’t reset other types of admin passwords.

correct answers

N,Y,N correct answer

User1 can reset the password of User3. Yes, it can, because of User3 is the User Administrator for the tenant not for the AD User2 can update the display name of User1 Yes User1 can reset the password of User2 No

The thing to pay attention to here is that a Password Administrator cannot change password of a user administrator - that's why its N, Y, N for me.

Correct answer: Y,Y,Y If we read this document https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords, we can see how the password manager can change even that of the global administrator

Correct

Link provided by JensV: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords "For example, a Password Administrator can reset the password for Directory Readers, Guest Inviter, Password Administrator, and users with no administrator role. If a user is assigned any other role, the Password Administrator cannot reset their password."