Exam MS-700 topic 1 question 24 discussion

I think it should be O365 Group

Selectos Answer: C Microsoft 365 Group "Universal" security groups are only available in on premise AD

There ain't no such thing as a Universal Security Group in 365 and no mention of On-Premis AD here anyway. Therefore C is correct in this scenario

adding them to a team will add them to a ms365 group

If your business requires that you restrict who can create groups, you can restrict Microsoft 365 Groups creation to the members of a particular Microsoft 365 group or security group. Best practice for that scenario, will be to create an dynamic Entra Security Group with all managers as members. In that Question, you have the option Universal Security Group, im not sure, but i believe universal is the keyword. An universal Security Group is an AD Group. In Entra they are only called Security Groups.

C and D are correct.I limited the creation of groups or teams based on both types of groups. I also ask CoPilot. First I copy to copilot question and 4 answers - Copilot says [D] - universal security group,, next I copy question and 3 answers (except D) Copilot says - [C] - O365 group. it's one of those questions where you have 2 good answers but you can choose one.

O365 group is used for this kind of stuff.

the most easiest way to handle

Okay, I have tested this in my environment. https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide I have tried the above article with O365 group and with Security group. It does restrict the permission - that means only member in the group can create Teams. However, If i read the question carefully, it say you need to ensure that only manager can create teams. And in a ideal MS world for permission you will alway use security group. Hence my answer is D Vote for D

I believe it's D. I have done this before with D at a client's tenant. Copilot says: Prompt 1: To ensure that only company managers can create teams in Microsoft Teams, you should take the following steps: Add all the managers to a universal security group (Option D). A universal security group allows you to control access and permissions across multiple domains or forests. By adding managers to this group, you can restrict team creation privileges to authorized personnel. Remember that a universal security group provides a broader scope and is suitable for managing permissions organization-wide. Once you’ve set up the security group, you can enforce team creation policies effectively. A security group created in Microsoft 365 can be either a global security group or a universal security group, depending on its purpose and scope. Prompt 2: Certainly! To restrict the creation of Microsoft Teams and maintain control over group creation, you can follow these steps: 1. Create a Security Group ... MS Docs also mention security groups.

To ensure that only company managers can create teams in Microsoft Teams, you should follow these steps: Add all the managers to an Office 365 group. Here’s why: Office 365 groups provide a way to manage membership and permissions across various Microsoft 365 services, including Teams. By adding managers to an Office 365 group, you can control their access to Teams and other collaborative tools. Universal distribution groups and universal security groups are not specifically designed for managing Teams access. They serve different purposes (such as email distribution or security permissions) and won’t directly address your requirement. Creating a separate Office 365 group for managers allows you to grant them the necessary permissions within Teams while keeping their access organized and manageable.

Just in case anyone else wants to know what to do after the group is created. https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide&redirectSourcePath=%252farticle%252fmanage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-9776-005fced8e618#step-1-create-a-group-for-users-who-need-to-create-microsoft-365-groups

c is good

C is the right answer for sure

Answer is D Security Group. Remember one thumb rule in Office 365 Or Microsoft 365. When you use a group to assign a permission to more than one user it is definitely a security group. Only Security group can be used to assign permissions in bulk to users.

Selectos Answer: C

Answer C https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide