ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 59 discussion

Actual exam question from Microsoft's AZ-104
Question #: 59
Topic #: 2
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by juniorccs at May 19, 2022, 10:01 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ltkiller
Highly Voted 3 years, 2 months ago
Selected Answer: B
B:No, when you create a new tenant, the creator is the only global admin and owner, he must first give access to others to allow anything. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-access-create-new-tenant#your-user-account-in-the-new-tenant
upvoted 33 times
...
pranavhalgekar
Highly Voted 3 years, 2 months ago
Tested. Ans is B. No Even if User4 is owner of subscription, he was not able to find new tenant created by user1 in Azure Active Directory > Manage Tenant.
upvoted 19 times
...
JustinYoo
Most Recent 7 months, 3 weeks ago
Selected Answer: B
User4 is not an owner of the new one, only User1 can do that.
upvoted 1 times
...
MCLC2021
1 year, 2 months ago
Selected Answer: B
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles MICROSOFT ENTRA ROLES Global Administrator:Manage access to all administrative features in Microsoft Entra ID, as well as services that federate to Microsoft Entra ID Assign administrator roles to others, Reset the password for any user and all other administrators. User Administrator: Create and manage all aspects of users and groups, Manage support tickets, Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators.
upvoted 2 times
...
[Removed]
2 years, 1 month ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles -Owner Full access to all resources Delegate access to others
upvoted 3 times
hebbo777
1 year, 8 months ago
i believe owner have full access in the tenant which associated with its subscription, there is no information about new tenant whether its associated with this subscription or not
upvoted 1 times
...
...
AK4U_111
2 years, 5 months ago
how can a tenant such as external.contoso.onmicrosoft.com even be created? i cant find anything on how to do this. when i go to create tenant i can create a new one but not a sub tenant which is a part of the original tenant
upvoted 1 times
...
tomasek88
2 years, 5 months ago
Selected Answer: B
NO = B --> because User4 has nothing to do with NEW Azure Active Directory tenant named external.contoso.onmicrosoft.com
upvoted 2 times
...
JayLearn2022
2 years, 5 months ago
There are several version of this question. The following are the valid and invalid solutions that may be presented. Valid Solution: Meets the Goal Solution: Solution: You instruct User1 to create the user accounts. Invalid Solutions: Does not Meet the Goal -Solution: You instruct User2 to create the user accounts. -Solution: You instruct User3 to create the user accounts. -Solution: You instruct User4 to create the user accounts.
upvoted 8 times
...
myarali
2 years, 5 months ago
Selected Answer: B
- NO After User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com, User-1 becomes owner and Global Administrator of external.contoso.onmicrosoft.com. BUT User-4 doesn't have any authorization in new tenant. SO User-1 can not instruct User4 to create the user accounts. MAYBE that can be done after User-1 assigns Global Administrator or User Access Administrator Role to User-4.
upvoted 1 times
...
zellck
2 years, 6 months ago
Selected Answer: B
B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/custom-overview#scope When you assign a role, you specify one of the following types of scope: - Tenant - Administrative unit - Azure AD resource
upvoted 1 times
...
cryptostud
2 years, 10 months ago
This proves that answer to question 58 is No
upvoted 6 times
...
NaoVaz
2 years, 10 months ago
Selected Answer: B
B) "No" Only the tenant creators receive by default the Owner role inside the tenant and therefore are able to create user accounts.
upvoted 4 times
...
EmnCours
2 years, 11 months ago
Selected Answer: B
Correct Answer: B
upvoted 1 times
...
EmnCours
2 years, 11 months ago
Selected Answer: B
Correct Answer: B
upvoted 1 times
...
Fatrat
2 years, 11 months ago
User 1, who created the new tenancy, will be appointed as Global Administrator. The other 3 users, who belong to the first tenancy, would need to be invited into the new tenancy and given correct permission by User 1.
upvoted 1 times
...
Aypumpin
3 years ago
The answer is B
upvoted 1 times
...
Lazylinux
3 years, 1 month ago
B for sure What be forgotten is that Azure AD roles are used to manage access to Azure AD resources, whereas Azure roles are used to manage access to Azure resources. The scope of Azure AD roles is at the tenant level, whereas the scope of Azure roles can be specified at multiple levels including management group, subscription, resource group, resource. and hence Subscription owner has not access to AZ AD where as Azure Global Admin Can be granted owner of Azure subscription and not other way wrong
upvoted 5 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel