Exam MS-700 topic 2 question 1 discussion

Answer: Yes, No, No AAD p2 is necessary for access reviewers. User1, User2 and Guest do not have this. But User1 is User Admin: "Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews." https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#license-requirements

Answer should be No,Yes,No User 1 does not have Azure AD Premium 2 - Which is a prereq for creating access reviews https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

Guest users can review their own access and only their own, nobody elses. They also don't need to have an AAD Prem P2 license. all other users do though.

Yes, Yes and no. The question states "Can be assigned as reviewer". See below. -----Microsoft 365 and Security group owners can also use Azure AD to create access reviews for group members as long as the Global or User administrator enables the setting via the Access Reviews Settings pane.----

Correct answer is: Yes, Yes, No !

Yes, Yes, No User1: Have P2 which is included in E5 "Azure AD Premium P2, included with Microsoft 365 E5" from https://www.microsoft.com/en-ca/microsoft-365/compare-microsoft-365-enterprise-plans User2 is owner, so can have the reviewer permissions "https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review#next-reviews" Guest: is a guest :D

The answer is YES NO NO User1 = Yes Because he has a E5 license(s) that give(s) the Azure Premium 2 AND he is "User Administrator" User 2 = Also have the E5 so the Az.P2 also BUT doesn't have the role so it's NO GUEST = No of course because nothing

In the Specify reviewers section, in the Select reviewers box, select either one or more people to make decisions in the access reviews. You can choose from: Group owner(s): This option is only available when you do a review on a team or group. Selected user(s) or groups(s) Users review their own access Managers of users If you choose either Managers of users or Group owner(s), you can also specify a fallback reviewer. Fallback reviewers are asked to do a review when the user has no manager specified in the directory or if the group doesn't have an owner.

Prerequisites Azure AD Premium P2. Global administrator, User administrator, or Identity Governance administrator to create reviews on groups or applications. Global administrators and Privileged Role administrators can create reviews on role-assignable groups.

The answer is Yes/NO/NO. Yes: Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews No: you will need AAD P2 license if you have a Member users as group owners who perform an access review. No: For guest users, licensing needs will depend on the licensing model you’re using. However, the below guest users’ activities are considered Azure AD Premium P2 usage: Guest users who are assigned as reviewers

I just checked it a global without P2 is not able to create an access review. Looks like no,yes,no is the right answer. the second is yes because https://docs.microsoft.com/de-de/azure/active-directory/governance/create-access-review states that you need to be global, user or Ident gov admin to create a review, but you can assign a group owner to actually see it.

On exam 04-Mar-2022

I agree, Yes, No, No. As several comments said Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews

Looks like global admin users can no longer create a setup access review: 'Tenant does not have a valid license (EMS E5 or P2) required for Access reviews.'

Yes; No; No; https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#license-requirements 1: Yes. "Azure AD Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews." 2: No. Your directory needs at least as many Azure AD Premium P2 licenses as the number of employees who will be performing the following tasks: - Member users who are assigned as reviewers ... 3: No. For guest users, licensing needs will depend on the licensing model you’re using. However, the below guest users’ activities are considered Azure AD Premium P2 usage: - Guest users who are assigned as reviewers ...

For accessing Azure Ad access review need P2 license then for user2 also answer is No.

The answer should be No, No No. In all 3 cases, they are not assigned an Azure P2 license which is a requirement. Of course we know that even just having P2 licenses and not having them all assigned will technically work it's not supported and therefore I'd answer No on all of them. > How many licenses must you have? Your directory needs at least as many Azure AD Premium P2 licenses as the number of employees who will be performing the following tasks: Member users who are assigned as reviewers Member users who perform a self-review Member users as group owners who perform an access review Member users as application owners who perform an access review For guest users, licensing needs will depend on the licensing model you’re using. However, the below guest users’ activities are considered Azure AD Premium P2 usage: Guest users who are assigned as reviewers Guest users who perform a self-review Guest users as group owners who perform an access review Guest users as application owners who perform an access review