Skip to Content

Microsoft AZ-104: How to Restrict Microsoft Entra Invitations to Specific Domain Users?

Learn how to ensure invitations can only be sent to specific domain users in Microsoft Entra. Get the answer to this AZ-104 certification exam question.

Table of Contents

Question

You have a Microsoft Entra tenant named contoso.com.

You collaborate with an external partner named fabrikam.com.

You plan to invite users in fabrikam.com to the contoso.com tenant.

You need to ensure that invitations can be sent only to fabrikam.com users.

What should you do in the Microsoft Entra admin center?

A. From Cross-tenant access settings, configure the Tenant restrictions settings.
B. From Cross-tenant access settings, configure the Microsoft cloud settings.
C. From External collaboration settings, configure the Guest user access restrictions settings.
D. From External collaboration settings, configure the Collaboration restrictions settings.

Answer

D. From External collaboration settings, configure the Collaboration restrictions settings.

Explanation

To restrict invitations in Microsoft Entra (formerly Azure Active Directory) to only users from a specific domain like fabrikam.com, you need to configure the Collaboration restrictions settings in the External collaboration settings of the Microsoft Entra admin center.

The Collaboration restrictions allow you to specify a list of allowed or blocked domains for external collaboration. By adding fabrikam.com to the allow list, you ensure that invitations can only be sent to users from that domain. Any invitations sent to email addresses outside the allowed domains will be blocked.

The other options are incorrect because:
A. Tenant restrictions under Cross-tenant access settings control access between tenants, not invitations.
B. Microsoft cloud settings under Cross-tenant access settings configure trusted cloud instances, not domain restrictions.
C. Guest user access restrictions under External collaboration settings control what external users can do after being invited, not who can be invited.

Therefore, the correct answer is D. From External collaboration settings, configure the Collaboration restrictions settings.

Microsoft AZ-104 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft AZ-104 exam and earn Microsoft AZ-104 certification.