ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 60 discussion

Actual exam question from Microsoft's AZ-104
Question #: 60
Topic #: 2
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by kyle123123 at May 19, 2022, 7:58 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
pgmpp
Highly Voted 2 years, 10 months ago
The answer is No! I tested this. 1. I created a new Tenant contosogmpp. 2. Added 2 users, User1 and User 2 in this tenant and gave them global privileges 3. I logged through User1 and created a new tenant called externalcontossgmpp 4. Now when I logged in through User2 and try to switch tenants, the new tenant externalcontossgmpp is not available at all for User2. Hence User1 needs to invite User2 first
upvoted 63 times
ELearn
11 months, 2 weeks ago
Correct answer is: B.NO Clear explanation: In Azure only a Global Administrator can create a new Azure Active Directory (Azure AD) tenant. In this scenario, User1, who is a Global Administrator, creates a new Azure AD tenant named external.contoso.onmicrosoft.com. However, User3, who is an Owner of an Azure subscription, does not automatically have access to this new tenant. User1, as the one who created the new tenant, would be the only Global Administrator in the new tenant by default. Therefore, User3 would not be able to create user accounts in the new tenant unless User1 grants them the necessary permissions. So, instructing User3 to create the user accounts in the new tenant would not meet the goal, unless User1 first adds User3 as a User administrator/Global administrator in the new tenant.
upvoted 3 times
...
...
JohnPi
Highly Voted 2 years, 10 months ago
Selected Answer: B
it is another tentant
upvoted 48 times
...
allinict_111
Most Recent 7 months ago
No, this does not meet the goal. Here's why: User3, as a User Administrator in Azure AD, has permissions to create and manage users within the scope of an existing Azure AD tenant. However, because the new tenant external.contoso.onmicrosoft.com was just created by User1 (who is a Global Administrator), User3 will not automatically have administrative rights in the new tenant. To create new user accounts in external.contoso.onmicrosoft.com, you would need to either: Have User1 (the Global Administrator) create the new user accounts. Have User1 assign the necessary administrative roles to User3 in the new tenant so that User3 can create user accounts there. Therefore, simply instructing User3 to create the user accounts will not be sufficient unless they have been explicitly granted the necessary permissions in the new tenant.
upvoted 3 times
...
[Removed]
9 months, 3 weeks ago
Selected Answer: B
B is corerct
upvoted 1 times
[Removed]
9 months, 2 weeks ago
only User1
upvoted 1 times
...
...
hercule
1 year ago
Selected Answer: A
according to the documentation you need at least a User Administrator hence A is correct. https://learn.microsoft.com/en-us/entra/fundamentals/how-to-create-delete-users
upvoted 1 times
chucklu
11 months, 3 weeks ago
User3's User Administrator role is scoped to the original tenant contoso.onmicrosoft.com and does not extend to the new tenant external.contoso.onmicrosoft.com by default.
upvoted 3 times
...
...
MCLC2021
1 year, 1 month ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles MICROSOFT ENTRA ROLES Global Administrator:Manage access to all administrative features in Microsoft Entra ID, as well as services that federate to Microsoft Entra ID Assign administrator roles to others, Reset the password for any user and all other administrators. User Administrator: Create and manage all aspects of users and groups, Manage support tickets, Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators.
upvoted 1 times
TechThameem
1 year ago
You should understand the question properly, User1 (the Global admin) creates a new tenant, that means User1 has created a new domain where User1 only will have access no one other admins will have access in that tenant. So, User 3 cannot create a user account in that new tenant.
upvoted 1 times
...
...
tashakori
1 year, 3 months ago
No is right
upvoted 1 times
...
rreghioua
1 year, 5 months ago
Selected Answer: A
upvoted 1 times
...
VV11_SS22
1 year, 10 months ago
Correct answer is B
upvoted 1 times
...
NejmeddineBch
1 year, 10 months ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-users Add new users or delete existing users from your Azure Active Directory (Azure AD) tenant. To add or delete users, you must be a User Administrator or Global Administrator.
upvoted 2 times
...
[Removed]
1 year, 12 months ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles -User Administrator Create and manage all aspects of users and groups Manage support tickets Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators
upvoted 3 times
...
[Removed]
1 year, 12 months ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles -User Administrator Create and manage all aspects of users and groups Manage support tickets Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators
upvoted 4 times
...
Renss78
2 years, 3 months ago
Answer is NO, the one who just created the tenant is the only one who can add Users. But when he assign "user 3" the User Administrator or Global Administrator role then he/she can. And yes NOT only the Global Adminsitrator can add AD Users. Source: ""Add new users or delete existing users from your Azure Active Directory (Azure AD) tenant. To add or delete users, you must be a User Administrator or Global Administrator." https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory
upvoted 5 times
...
AK4U_111
2 years, 3 months ago
how can a tenant such as external.contoso.onmicrosoft.com even be created? i cant find anything on how to do this. when i go to create tenant i can create a new one but not a sub tenant which is a part of the original tenant
upvoted 2 times
...
tomasek88
2 years, 3 months ago
NO = B --> because User2 OR User3 OR User4 - have nothing to do with NEW Azure Active Directory tenant named external.contoso.onmicrosoft.com
upvoted 1 times
...
JayLearn2022
2 years, 4 months ago
There are several version of this question. The following are the valid and invalid solutions that may be presented. Valid Solution: Meets the Goal Solution: Solution: You instruct User1 to create the user accounts. Invalid Solutions: Does not Meet the Goal -Solution: You instruct User2 to create the user accounts. -Solution: You instruct User3 to create the user accounts. -Solution: You instruct User4 to create the user accounts.
upvoted 3 times
MothePro
2 years, 2 months ago
what is the difference between user 1 and user2? they are both Global Admin..
upvoted 1 times
fateman17
1 year, 10 months ago
user 1 made the tenant.
upvoted 1 times
...
...
...
myarali
2 years, 4 months ago
NO After User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com, User-1 becomes owner and Global Administrator of external.contoso.onmicrosoft.com. BUT User-3 doesn't have any authorization in new tenant. User-3's User Administrator Role applies to contoso.onmicrosoft.com NOT for external.contoso.onmicrosoft.com. SO User-1 CAN NOT instruct User3 to create the user accounts. MAYBE that can be done after User-1 assigns Global Administrator or User Access Administrator Role to User-3.
upvoted 4 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel