Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 2 question 59 discussion

Actual exam question from Microsoft's AZ-104

Question #: 59
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by juniorccs at May 19, 2022, 10:01 a.m.

Comments

Submit Cancel

ltkiller

Highly Voted 3 years ago

Selected Answer: B

B:No, when you create a new tenant, the creator is the only global admin and owner, he must first give access to others to allow anything. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-access-create-new-tenant#your-user-account-in-the-new-tenant

upvoted 33 times

...

pranavhalgekar

Highly Voted 3 years ago

Tested. Ans is B. No Even if User4 is owner of subscription, he was not able to find new tenant created by user1 in Azure Active Directory > Manage Tenant.

upvoted 19 times

...

JustinYoo

Most Recent 6 months ago

Selected Answer: B

User4 is not an owner of the new one, only User1 can do that.

upvoted 1 times

...

[Removed]

9 months, 1 week ago

Selected Answer: B

B is corerct

upvoted 1 times

[Removed]

9 months, 1 week ago

only User1

upvoted 1 times

...

MCLC2021

1 year, 1 month ago

Selected Answer: B

https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles MICROSOFT ENTRA ROLES Global Administrator:Manage access to all administrative features in Microsoft Entra ID, as well as services that federate to Microsoft Entra ID Assign administrator roles to others, Reset the password for any user and all other administrators. User Administrator: Create and manage all aspects of users and groups, Manage support tickets, Monitor service health Change passwords for users, Helpdesk administrators, and other User Administrators.

upvoted 2 times

...

[Removed]

1 year, 11 months ago

Selected Answer: A

https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles -Owner Full access to all resources Delegate access to others

upvoted 3 times

hebbo777

1 year, 6 months ago

i believe owner have full access in the tenant which associated with its subscription, there is no information about new tenant whether its associated with this subscription or not

upvoted 1 times

...

AK4U_111

2 years, 3 months ago

how can a tenant such as external.contoso.onmicrosoft.com even be created? i cant find anything on how to do this. when i go to create tenant i can create a new one but not a sub tenant which is a part of the original tenant

upvoted 1 times

...

tomasek88

2 years, 3 months ago

Selected Answer: B

NO = B --> because User4 has nothing to do with NEW Azure Active Directory tenant named external.contoso.onmicrosoft.com

upvoted 2 times

...

JayLearn2022

2 years, 3 months ago

There are several version of this question. The following are the valid and invalid solutions that may be presented. Valid Solution: Meets the Goal Solution: Solution: You instruct User1 to create the user accounts. Invalid Solutions: Does not Meet the Goal -Solution: You instruct User2 to create the user accounts. -Solution: You instruct User3 to create the user accounts. -Solution: You instruct User4 to create the user accounts.

upvoted 8 times

...

myarali

2 years, 4 months ago

Selected Answer: B

- NO After User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com, User-1 becomes owner and Global Administrator of external.contoso.onmicrosoft.com. BUT User-4 doesn't have any authorization in new tenant. SO User-1 can not instruct User4 to create the user accounts. MAYBE that can be done after User-1 assigns Global Administrator or User Access Administrator Role to User-4.

upvoted 1 times

...

zellck

2 years, 4 months ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/custom-overview#scope When you assign a role, you specify one of the following types of scope: - Tenant - Administrative unit - Azure AD resource

upvoted 1 times

...

cryptostud

2 years, 8 months ago

This proves that answer to question 58 is No

upvoted 6 times

...

NaoVaz

2 years, 9 months ago

Selected Answer: B

B) "No" Only the tenant creators receive by default the Owner role inside the tenant and therefore are able to create user accounts.

upvoted 4 times

...

EmnCours

2 years, 9 months ago

Selected Answer: B

Correct Answer: B

upvoted 1 times

...

EmnCours

2 years, 9 months ago

Selected Answer: B

Correct Answer: B

upvoted 1 times

...

Fatrat

2 years, 10 months ago

User 1, who created the new tenancy, will be appointed as Global Administrator. The other 3 users, who belong to the first tenancy, would need to be invited into the new tenancy and given correct permission by User 1.

upvoted 1 times

...

Aypumpin

2 years, 11 months ago

The answer is B

upvoted 1 times

...

Load full discussion...