Explore how Azure Active Directory group-based licensing impacts user licenses when using nested groups. Expert analysis for the Microsoft AZ-104 certification exam.
Table of Contents
Question
You have an Azure AD tenant named adatum.com that contains the groups shown in the following table.
| Name | Type | Member of |
|---|---|---|
| Group1 | Security | None |
| Group2 | Security | Group1 |
Adatum.com contains the users shown in the following table.
| Name | Member of |
|---|---|
| User1 | Group1 |
| User2 | Group2 |
You assign an Azure Active Directory Premium P2 license to Group1 as shown in the following exhibit.
Group2 is NOT directly assigned a license.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
- You can assign User1 the Microsoft Defender for Cloud Apps Discovery licese.
- You can remove the Azure Active Directory Premium P2 license from User1.
- User2 is assigned the Azure Active Directory Premium P2.
Answer
- You can assign User1 the Microsoft Defender for Cloud Apps Discovery licese: Yes
- You can remove the Azure Active Directory Premium P2 license from User1: No
- User2 is assigned the Azure Active Directory Premium P2: Yes
Explanation
Yes, you can assign User1 the Microsoft Defender for Cloud Apps Discovery license. Since User1 is a direct member of Group1, which has been assigned the Azure Active Directory Premium P2 license, User1 inherits all the licenses associated with that plan, including Microsoft Defender for Cloud Apps Discovery.
No, you cannot remove the Azure Active Directory Premium P2 license from User1. When a license is assigned to a group, the license is inherited by all users within that group. To remove the license from User1, you would need to remove User1 from Group1 or remove the license assignment from Group1 entirely.
Yes, User2 is assigned the Azure Active Directory Premium P2 license. Although Group2 is not directly assigned a license, it is a member of Group1, which has been assigned the Azure Active Directory Premium P2 license. This means that all users within Group2, including User2, inherit the licenses assigned to Group1 through transitive licensing.
In summary, when using group-based licensing in Azure Active Directory, licenses assigned to a group are inherited by all users within that group, as well as users in any nested groups. This allows for efficient license management and ensures that users have access to the necessary features and services based on their group memberships.
Microsoft AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft AZ-104 exam and earn Microsoft AZ-104 certification.