Exam MS-100 topic 1 question 22 discussion

Answer is only A. Guest inviter's can only invite guest users, not create. I just tested this in my tenant. Create user is grayed out, invite user is enabled. Answer is only A folks.

I think A and C is correct. See here: https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task#users [Create guest user]

https://learn.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal#prerequisites

Both AC are correct. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal

I just tested guys, it's ABC! https://learn.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal

MEG's link is convincing. https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task#users [Create guest user]

https://learn.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal#prerequisites A role that allows you to create users in your tenant directory, such as the Global Administrator role or a limited administrator directory role (for example, Guest inviter or User administrator).

A. The user with the Global administrator role. C. The user with the Security administrator and Guest inviter roles. (This answer should only have Guest inviter roles) part of the answer. The Guest inviter role in Azure AD has the ability to create and manage guest user accounts, which are used to give external users access to certain resources within the tenant. The Global administrator and the Password administrator roles have the highest level of administrative access and can manage all aspects of an Azure AD tenant, but they are not specifically related to guest user management. The Security administrator role is not related to guest user management and does not have the necessary permissions to create guest users. A user with no roles configured will not have any permissions to manage or access the Azure AD tenant. It is important to note that, depending on the organization's security policies, creating guest user accounts may require approval from more than one administrator with the Global administrator or Security administrator roles.

Tested in the lab and only A is the answer

i just asked chatGPT and that is the Answer: The user that has the necessary permissions to create guest users is the one that has the "Guest inviter" role configured. Option C is the correct answer. The "Guest inviter" role is specifically designed to allow a user to create and manage guest accounts in Azure AD. Option A and B are incorrect. The "Global administrator" and "Password administrator" roles do not include permissions to create guest users. Option D is also incorrect, as the user with no roles configured does not have any permissions to create guest users.

When you have invite user, account to s created (pending activation). You can list s ch account, delete it. Both inviter and global admin can create guest users. On top is f this also synchronization user can do it and normal user when tenant policy has no restrictions on b2b inviting.

I think it is all users. It does not specifically specify that the External collaboration settings>>Guest invite settings are configured: https://learn.microsoft.com/en-us/microsoft-365/solutions/limit-who-can-invite-guests?view=o365-worldwide I tested this, where the Guest invite settings were not configure, and everyone can invite (ie. create) guest accounts!

Guest Inviter's cannot create users.

Guest inviter's can invite but not create.

A is correct

AC https://learn.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task#users Tarea Rol menos privilegiado Funciones adicionales Crear usuario invitado Invitador invitado Administrador de usuarios

My understanding is that it is only A Inviting a guest that does not have an account, gets one made for them. But you cannot directly use the "Create Guest account" button as a Guest inviter. Pretty sure this is a Microsoft certified trick question