Exam MS-500 topic 1 question 66 discussion

Actual exam question from Microsoft's MS-500

Question #: 66
Topic #: 1

HOTSPOT -
You have a Microsoft 365 E5 subscription.
You need to create a role-assignable group. The solution must ensure that you can nest the group.
How should you configure the group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Security only -
You can add an existing Security group to another existing Security group (also known as nested groups), creating a member group (subgroup) and a parent group. The member group inherits the attributes and properties of the parent group, saving you configuration time.
Incorrect:
Not supported:
Adding Security groups to Microsoft 365 groups.
Adding Microsoft 365 groups to Security groups or other Microsoft 365 groups.

Box 2: Assigned only -
The membership type for role-assignable groups must be Assigned and can't be an Azure AD dynamic group.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-membership-azure-portal

by RVR at Sept. 24, 2022, 2:44 p.m.

Comments

Submit Cancel

RVR

Highly Voted 2 years, 9 months ago

Group Type: Microsoft 365 or security Reference: "To assign a role to a group, you must create a new security or Microsoft 365 group with the isAssignableToRole property set to true" Membership type: Assigned only Reference: "The membership type for role-assignable groups must be Assigned and can't be an Azure AD dynamic group." Link: https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-concept

upvoted 10 times

Pretsan

2 years, 8 months ago

It informs that you can ensure you can nest the group and MS 365 don't support nesting so I would go for: Group type: Security group Membership type: Assigned only

upvoted 15 times

msysadmin

2 years, 4 months ago

Agree: Answer is correct. "Microsoft 365 Groups don't support nesting with other Microsoft 365 Groups or with distribution or security groups"

upvoted 2 times

...

Dhamus

Most Recent 2 years, 1 month ago

Microsoft 365 group does not support nesting, that is, you cannot add groups within this group.

upvoted 1 times

...

SaadKhamis

2 years, 5 months ago

Based on https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-concept#how-are-role-assignable-groups-protected - Group nesting is not supported. A group can't be added as a member of a role-assignable group. So, what is the right answer?

upvoted 1 times

...

amymay101

2 years, 5 months ago

M365 or Security group and 'assigned' only

upvoted 1 times

kmk_01

2 years, 3 months ago

You can't nest M365 groups.

upvoted 2 times

...

tibodenbeer

2 years, 6 months ago

As of now, the answer is correct. Tried to nest an Microsoft365 group but the option is grayed out: - Create M365 group - Go to Groups memberships --> Add memberships is grayed out. If you do the same with a security group, the "add memberships" is available. So the answer is correct (for now, since they specifically ask for a non nesting.) Security group --> Assigned

upvoted 4 times

...

ccadenasa

2 years, 7 months ago

I think the answer is correct however, Microsoft 365 groups support nesting through dynamic groups in Azure Active Directory according to this information > https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide#microsoft-365-groups but it is in preview > https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-rule-member-of which is not relevant for an exam

upvoted 1 times

...