Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Global Administrator role in contoso.onmicrosoft.com has no permissions in external.contoso.onmicrosoft.com unless explicitly assigned
Default Behavior When Creating a New Tenant: When User1 creates a new Azure AD tenant (external.contoso.onmicrosoft.com), User1 becomes the only Global Administrator in that new tenant by default. No other users, including User2, will have any roles or permissions in the new tenant unless explicitly added by User1. User2's Role: While User2 is a Global Administrator in the original tenant (contoso.onmicrosoft.com), that role does not carry over to the newly created tenant (external.contoso.onmicrosoft.com). Therefore, User2 cannot create user accounts in the new tenant unless User1 explicitly grants User2 permissions (e.g., by assigning User2 the Global Administrator role in the new tenant)
NO After User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com, User-1 becomes owner and Global Administrator of external.contoso.onmicrosoft.com. BUT User-2 doesn't have any authorization in new tenant. User-2's Global Administrator Role applies to contoso.onmicrosoft.com NOT for external.contoso.onmicrosoft.com. SO User-1 can not instruct User2 to create the user accounts. MAYBE that can be done after User-1 assigns Global Administrator or User Access Administrator Role to User-2.