Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think the trick here is that the test questions has not stated that these groups are role assignable. If you do not do this at the creation of the group then "isAssignableToRole" is automatically set to false and no role is applied or can be applied to the group afterwards as this setting cannot be changed once the group is created. So we are meant to assume that the role was never added to the group because its the AU that is giving the role not the groups listed in the first section. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/groups-concept
The question doesn't talk about groups. You can directly assign a role to a User too.
A due to least privilege