ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam
Go to Exam

Exam AZ-303 topic 5 question 91 discussion

Actual exam question from Microsoft's AZ-303
Question #: 91
Topic #: 5
[All AZ-303 Questions]

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that the Admin1 can create access reviews in contoso.com.
Solution: You purchase an Azure Directory Premium P2 license for contoso.com.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Instead use Azure AD Privileged Identity Management.
Note: PIM essentially helps you manage the who, what, when, where, and why for resources that you care about. Key features of PIM include:
✑ Conduct access reviews to ensure users still need roles
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
by nemojzapipu at Jan. 6, 2021, 11:13 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
nemojzapipu
Highly Voted 4 years, 6 months ago
YES It clearly states that user wants to access section "Access review" from AAD (Identity Governance) which leads to: A valid Azure AD Premium P2, Enterprise Mobility + Security E5 paid, or trial license is required to use Azure AD access reviews. I tried this on two tenants. 1. Global Admin + P2 -> I can create Access review -> https://ibb.co/8j81w5p 2. Global Admin without P2 -> Cannot access "Access review" -> https://ibb.co/QFC2hh6
upvoted 41 times
crazyaboutazure
4 years ago
what about tenant not onboarded yet requirement?
upvoted 1 times
...
xaccan
4 years, 6 months ago
Answer is No, PIM is required. read more here: https://www.examtopics.com/discussions/microsoft/view/8821-exam-az-300-topic-16-question-6-discussion/
upvoted 2 times
...
J4U
3 years, 11 months ago
I tested it as a User Admin w/o P2 license and I am able to create access review from IG. So the requirement is the reviewers should have P2 license, not the creators.
upvoted 2 times
...
...
AD3
Most Recent 3 years, 5 months ago
Look at the page and expand Identity Governance. You will see bunch of items under it and the statement in the problem says all other identity governance are available. That means the P2 license is enabled. Only thing that is needed is to use PIM. So answer is NO. https://www.microsoft.com/en-us/security/business/identity-access-management/azure-ad-pricing?rtc=1
upvoted 2 times
...
BhupalS
3 years, 6 months ago
Azure AD Premium P2 licenses are not required for the following tasks: No licenses are required for users who set up PIM, configure policies, receive alerts, and set up access reviews. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements
upvoted 1 times
...
jr_luciano
3 years, 6 months ago
Correct Answer: B (NO)
upvoted 1 times
...
SKAZ303
3 years, 7 months ago
Sould be A. Premium P2 ($9 per user per month) Everything offered in P1 Identity Protection Privileged Identity Management Access reviews
upvoted 1 times
...
bigticket
3 years, 7 months ago
YES. You need a valid Azure AD Premium (P2) license for each person, other than Global administrators or User administrators, who will create or do access reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/deploy-access-reviews
upvoted 1 times
...
Ario
3 years, 11 months ago
Prerequisites for Access review : Azure AD Premium P2 Global administrator or User administrator Microsoft 365 and Security group owner (Preview)
upvoted 2 times
...
syu31svc
3 years, 11 months ago
User Administrator role does not require P2 license to setup access reviews. Instead, you need to onboard access reviews in your tenant. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview Answer is No
upvoted 3 times
...
aabdous
3 years, 11 months ago
Answer is Yes. Look this page https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review Show Prerequisites
upvoted 1 times
...
network_zeal
3 years, 11 months ago
YES, need p2 license to create access review
upvoted 1 times
...
Hrithiktej
4 years, 1 month ago
seems correct to me under what does it do ? section of this What is Azure AD Privileged Identity Management? we see "Conduct access reviews to ensure users still need roles" https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
upvoted 1 times
...
nfett
4 years, 1 month ago
repeat
upvoted 3 times
...
Mj11Az
4 years, 2 months ago
Yes, Azure AD Premium P2 Global administrator or User administrator
upvoted 3 times
...
Alivina
4 years, 2 months ago
I think the answer is NO. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up (CREATE) access reviews, configure settings, or apply the decisions from the reviews. For example, An administrator creates an access review of Group B with 500 users and 3 group owners, and assigns the 3 group owners as reviewers. Only required 3 Licenses.
upvoted 3 times
UnknownSecret
4 years ago
Hmmm.... When I read the lik, the one YOU provided, I see the below sentence: Using this feature requires an Azure AD Premium P2 license. On what basis you claim that "Azure AD Premium P2 licenses are not required...."
upvoted 1 times
...
...
rockyykrish
4 years, 3 months ago
if you have a P2 License you can get an access review. So the answer should be yes.
upvoted 1 times
...
oug
4 years, 3 months ago
Prerequisite license - Azure AD Premium P2 license. Azure Portal --> Identity Governance --> Privileged Identity Management --> Azure resources --> access review So, with P2 license, it is not auto, still need PIM.
upvoted 2 times
...
aabdous
4 years, 3 months ago
Answer is YES https://docs.microsoft.com/en-us/azure/active-directory/governance/deploy-access-reviews#licenses
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel