Skip to Content

AZ-104: Learn how to design user and group accounts in Microsoft Entra ID

Your company has decided to implement the user and group account features of Microsoft Entra ID in their identity and governance strategy. You need to explain the types of accounts, roles, and assignments to the planning team, and guide them in their strategy.

Question 1

What type of user account allows an external organization to access your resources?

A. A Contributor user account for each member of the team.
B. An administrator account for each member of the team.
C. A guest user account for each member of the external team.

Answer

C. A guest user account for each member of the external team.

Explanation

A guest user account restricts users to just the access they need.

A is incorrect. Contributor is a type of role and not a type of user account.
B is incorrect. Administrator accounts should be restricted to a limited number of users responsible for your organization’s identity management.

Question 2

What kind of group account can you create so you can apply the same permissions to all group members?

A. Security group
B. Microsoft Entra bulk group
C. Microsoft 365 group

Answer

A. Security group

Explanation

You can create a security group for a specific security policy and apply the same permissions to all members of the group.

B is incorrect. You can do bulk operations on users in Microsoft Entra ID, but there’s no defined ‘bulk’ group.
C is incorrect. Microsoft 365 groups give members access to a shared mailbox, calendar, files, and so on.

Question 3

Which Microsoft Entra role enables a user to manage all groups in your Teams tenants, and also assign other admin roles?

A. Global administrator
B. Security administrator​
C. User administrator​

Answer

A. Global administrator

Explanation

The Global Administrator role manages all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities. This role can manage groups across tenants and assign other administrator roles.

B is incorrect. The Security Administrator role can read security information and reports, and manage configuration in Microsoft Entra ID and Microsoft 365.
C is incorrect. The User Administrator role can manage all aspects of users and groups, including resetting passwords for limited admins.

Microsoft Azure Administrator AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure Administrator AZ-104 exam and earn Microsoft Azure Administrator AZ-104 certification.