Exam AZ-100 topic 1 question 3 discussion

Actual exam question from Microsoft's AZ-100

Question #: 3
Topic #: 1

You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com.
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions.
You need to ensure that you can view all the resources in all the subscriptions.
What should you do?

A. From the Azure portal, modify the profile settings of your account.
B. From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.
C. From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.
D. From the Azure portal, modify the properties of the Azure AD tenant.

Show Suggested Answer

Suggested Answer: C 🗳️
The New-AzureADUserAppRoleAssignment cmdlet assigns a user to an application role in Azure Active Directory (AD). Use it for the application report.
References:
https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduserapproleassignment?view=azureadps-2.0

by Gman80 at July 23, 2020, 9:29 a.m.

Comments

Submit Cancel

Gman80

Highly Voted 4 years, 9 months ago

https://docs.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin Answer is D

upvoted 9 times

photon99

1 year, 6 months ago

Correct beacuse New-AzureADUserAppRoleAssignment is specific to Azure AD Role which Assigns a user to an application role. Here we need RBAC role on all 100 subscriptions.

upvoted 1 times

...

tashakori

Most Recent 1 year, 1 month ago

D is right

upvoted 1 times

...

ea5c9f9

1 year, 3 months ago

Selected Answer: D

For testing purposes, the correct answer is D.

upvoted 1 times

...

Exam AZ-100 All Questions

View all questions & answers for the AZ-100 exam

Exam AZ-100 topic 1 question 3 discussion

Comments

Gman80

photon99

tashakori

ea5c9f9

SY0-701