ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam
Go to Exam

Exam AZ-303 topic 5 question 90 discussion

Actual exam question from Microsoft's AZ-303
Question #: 90
Topic #: 5
[All AZ-303 Questions]

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that the Admin1 can create access reviews in contoso.com.
Solution: You assign the Global administrator role to Admin1.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Instead use Azure AD Privileged Identity Management.
Note: PIM essentially helps you manage the who, what, when, where, and why for resources that you care about. Key features of PIM include:
✑ Conduct access reviews to ensure users still need roles
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
by Kraviecc at Jan. 16, 2021, 12:47 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 4 years, 1 month ago
this is crap question it's either not valid anymore or the only answer here seems to be P2 license i try'd everything in the lab and am always required to have P2 license no matter if am global admin or user admin or all together..
upvoted 14 times
crazyaboutazure
3 years, 9 months ago
Ditto, either the guy is assuming tenant has been onboarded as then person has the right rights to create access review for an app or app group with global admin
upvoted 1 times
...
janshal
4 years ago
You will need P2 to make this feature available. Now, because the user has the User Administrator rule he doesn't need any licensing associated with his account to create the access review. so the answer is YES first enable feature then start to create because the user need no license
upvoted 1 times
...
...
Krsto
Highly Voted 4 years, 2 months ago
Tenant does not have a valid license (EMS E5 or P2) required for Access reviews. You get this message when trying to see Access Reviews. And this is with Global admin role. In order to use this you need to have: Azure AD Premium P2 Global administrator or User administrator https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review
upvoted 6 times
...
pingpongset
Most Recent 2 years, 8 months ago
How do you know whether P2 has been purchased or not based on the question?
upvoted 1 times
...
jr_luciano
3 years, 3 months ago
Correct Answer: B (NO)
upvoted 1 times
...
Dpejic
3 years, 5 months ago
On exam today 22/11/21 Score 839
upvoted 1 times
kmkr
3 years, 5 months ago
How did you answer?
upvoted 1 times
...
...
Mesfer
3 years, 6 months ago
Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 1 times
...
Mesfer
3 years, 6 months ago
Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 1 times
...
indra589
3 years, 7 months ago
Answer is Yes. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#license-requirements Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews.
upvoted 1 times
...
Jcbrow27
3 years, 10 months ago
is mandatory have a P2 licence. tested
upvoted 2 times
...
kiwi123
3 years, 11 months ago
No difference between Global admin or user admin in this case, so the problem is the license. Provided answer is correct. https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review#prerequisites
upvoted 3 times
...
Mj11Az
3 years, 11 months ago
Here we can assume no P2 license so answer will be NO.
upvoted 3 times
...
oshoparsi
4 years, 3 months ago
B is correct. you can create access review even without Global admin and just as security admin or user administrator. tested in the lab. User administrator, Compliance administrator, and Security administrator roles. The tenent needs to be on boarded which was the old requirement.and now is not required. the question sounds old.
upvoted 1 times
...
glorianhelmy
4 years, 3 months ago
es is the CORRECT answer here, because the Global Administrator role has the permission to create Access Reviews without any license assignment in the latest version of Access Reviews through Identity Governance.
upvoted 3 times
glorianhelmy
4 years, 3 months ago
Yes** is the CORRECT answer here, because the Global Administrator role has the permission to create Access Reviews without any license assignment in the latest version of Access Reviews through Identity Governance
upvoted 3 times
...
...
G_Z
4 years, 3 months ago
With the global admin permission, the user can assign the PIM.
upvoted 1 times
...
Kraviecc
4 years, 3 months ago
Correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago