Exam SC-300 topic 1 question 94 discussion

Actual exam question from Microsoft's SC-300

Question #: 94
Topic #: 1

HOTSPOT
-

You have a Microsoft Entra tenant that contains the users shown in the following table.

The tenant contains the identities shown in the following table.

Which users can create custom security attributes, and to which identities can the attributes be assigned? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by anonymousarpanch at Feb. 6, 2025, 10:56 a.m.

Comments

Submit Cancel

d1e85d9

2 months, 3 weeks ago

Can create custom security attributes: - Global administrator - Attribute Definition administrator Custom secuerity attributes can assigned to: - Security group (group1) - Service principal (Service1)

upvoted 1 times

AcTiVeGrEnAdE

2 months ago

This is one thing Global Administrator cannot do. Actually learned this in my GCCH tenant when I had a request come in. Custom security attributes can only be applied to users and service principals

upvoted 1 times

...

Rackup

3 months, 4 weeks ago

User1 and User2 only for creating custom security attributes Group1, MI1, and Service1 for where attributes can be assigned

upvoted 1 times

AcTiVeGrEnAdE

2 months ago

Global Admin cannot create custom security attributes

upvoted 1 times

...

krutesh

4 months ago

Answer: User1 and User2 can create custom security attributes. custom security attributes can be assigned to Service1 Only. While Attribute Definition Administrator role is specifically designed for managing custom security attributes, Global Administrators have highest level of permissions and can perform this task as well. Custom security attributes can be added to following Microsoft Entra objects: Microsoft Entra users Microsoft Entra enterprise applications (service principals)

upvoted 1 times

AcTiVeGrEnAdE

2 months ago

Global Admin cannot create custom security attributes

upvoted 1 times

...

csi_2025

4 months ago

This is wrong. A GA does not have the permission to do so. While a GA has widespread permissions across the tenant he does not have permissions for all tasks including creating custom security attributes.

upvoted 3 times

...

anonymousarpanch

4 months, 3 weeks ago

correct. at present customer security attributes can only be assigned to users and service principals. refer https://learn.microsoft.com/en-us/entra/fundamentals/custom-security-attributes-overview

upvoted 3 times

...