Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answer is: C. Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources. Why not the others? A. Assigning the Owner role for a subscription does not grant access to the tenant root management group. B. Same as A — this is about subscription-level access, not tenant root. D. Creating a new management group does not grant access to the root management group — only that specific group.
Is D the correct option. The question is about applying a policy on the root management group. You cannot apply a policy on the root management group directly, so you need to create a new management group and assign user1 the "owner" role, because Entra ID roles do not apply to policies.
Based on principle of least privileges, Owner access is sufficient to assign access policies, however point A mention using default conditional access that is wrong. Hence, the other possible answer will be Azure AD Global admin.