Exam MS-102 topic 1 question 139 discussion

Group 1: None (M365 can only contain users). Group 4: Group 3 and group 5. Tested group 4 scenario in a lab as well.

Tested this. Group 4: Group 3 and 5 Only Even if a role is linked to the group. It can be a member of another group.

Group 1: None Group 4: Only Group 5, Currently don't support: "Adding groups as members of a role-assignable group" Group 3 Role assignments allowed group.

https://learn.microsoft.com/it-it/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide

Group1: none Group4: 3 + 5 "We currently don't support: Adding groups to a group synced with on-premises Active Directory. Adding security groups to Microsoft 365 groups. Adding Microsoft 365 groups to security groups or other Microsoft 365 groups. Assigned membership to shared resources and apps for nested security groups. Applying licenses to nested security groups. Adding distribution groups in nesting scenarios. Adding security groups as members of mail-enabled security groups. Adding groups as members of a role-assignable group." https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-groups#add-or-remove-a-group-from-another-group

Thank you @Flim322, you are rigth, Group nesting isn't supported. A group can't be added as a member of a role-assignable group. Therefore, Group 4: Group 5 only I complete your answer by this important link. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/groups-concept

seems no one has a good answer for this... :D

Group 1: a member of group 2 only (M365) Group 4: a member of group 3 and group 5 only

Group 4: Group 5 only For the role role-assignable groups, group nesting isn't supported. A group can't be added as a member of a role-assignable group.