Exam SC-300 topic 1 question 1 discussion

There is not enough information in the question to provide a 100% correct answer. You can assign licences to any group created within the Azure AD portal. These can include security groups, Microsoft 365 groups, and either assigned or dynamic groups. You can even create a dynamic device security group and assign E5 licences to it, which doesn't make sense but is true (I've tested it). However, the missing bit of information is whether the Microsoft 365 groups have the "SecurityEnabled" attribute set to True. Only M365 groups that have the "SecurityEnabled" attribute set to True can have licences assigned to them. If the group is created in the M365 Admin Centre, then the "SecurityEnabled" attribute is set to False and you can not assign licences to the group. But if the M365 group is created in the Azure AD portal, then the "SecurityEnabled" attribute is set to True and you can assign licences. For the answer, I would make an assumption that because this is an Identity-related exam testing us on Azure AD topics, that the M365 groups were created in the Azure AD portal and therefore have the "SecurityEnabled" attribute set to True. Which means the correct answer is B - all groups.

Wrong, you can assign licenses to Microsoft 365 groups as well. The correct answer is E

You can't assign licence to M365 group and you can't assign to security group with device. So only C is good, but rember that user in nested group will not get license.

Azure AD’s group-based licensing currently works only with security groups that contain user objects (static or dynamic). It does not support: - Distribution lists or mail-enabled distribution groups - Microsoft 365 (Office 365) groups - Groups whose membership is based on device objects Given your groups: - Group1: Security group with assigned user membership ❌ Supported - Group2: Security group with dynamic user membership ✅ Supported - Group3: Mail-enabled distribution group 🚫 Not supported - Group4: Microsoft 365 group 🚫 Not supported - Group5: Security group with dynamic device membership 🚫 Not supported Only Group1 and Group2 qualify for direct assignment of an Office 365 Enterprise E5 license.

You cannot assign a standard Office 365 E5 license directly to a device.

You cannot assign a standard Office 365 E5 license directly to a device. You can assign the 365 Apps for education or enterprise, but not the E5 license. E5 must only be assigned to individual users.

E. Group1, Group2, Group4, and Group5 only devices can not have license assigned

0365 license of user profile

License can be assigned to only security group and users.

C is the correct answer. The license in the question cannot be assigned to a dynamic device group. If group-based licensing is used, there are a few limitations: a) it does not support nested groups in which case, only the immediate first level user members will get the license. b)The feature can only be used with security groups & M365 groups that have securityEnabled=TRUE. securityEnabled=TRUE is not set by default on any M365 groups and the question does not specifically mention any of the groups being set so we have to assume false. Therefore, the only groups that can be assigned a license is group 1 & 2.

bing says you can assign a license to dynamic groups of type devices

Group-based licensing in Microsoft Entra ID is primarily designed for user accounts. This means that licenses are typically assigned to users, either directly or through their membership in groups. Devices, on the other hand, are not the primary targets for license assignments in this context.​ However, there is a specific scenario where devices can be licensed: device-based licensing for Microsoft 365 Apps for enterprise. In this case, you can assign licenses to devices by adding them to a security group in Microsoft Entra ID and then assigning the appropriate licenses to that group. This method is specifically for Microsoft 365 Apps and is not a general approach for all Microsoft services.​ learn.microsoft.com For more detailed information, you can refer to the official Microsoft documentation on https://learn.microsoft.com/en-us/microsoft-365/apps/licensing-activation/device-based-licensing

Chat GPT: To determine which groups you can assign a Microsoft Office 365 Enterprise E5 license directly, you need to understand that only Microsoft 365 groups with either: Assigned membership, or Dynamic user membership ...are eligible for direct license assignment in Azure AD.

Answer: D. User1 and User2 only, Users can be added to groups regardless of licence state. Licences assigned through group-based licensing are applied once the user is a member of the group

Answer is E. You cannot assign an E5 license to a device or a device group as they must be assigned to a user only. You can assign other licenses that are device based licensing for certain products (like 365 apps for enterprise) for shared devices so any user can use the apps etc.

"There are Microsoft 365, Office 365, and Windows licenses - These licenses are assigned to a Microsoft Entra user or group to grant them access to use Office or Windows products. You need one license for each user who needs access to Windows and / or office." Keywords: user, define identity licensing Source: https://learn.microsoft.com/en-us/training/modules/explore-identity-azure-active-directory/11-define-identity-licensing

Tested this per 15-03-2025: all groups were created in Entra ID. License assignments however need to be done in the 365 admin center, I could assign a license to all the groups. However, when the Microsoft 365 groups are created in the M365 admin center, you cannot assigned a license to the group. sezza_blunt's post is the most accurate and therefor I would vote for B as well.