MS-102 Question 52

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Statement 1 "User1 can reset the password of User3." ✅ Yes User1 is a Password Administrator for AU2, and User3 is a member of AU2. Therefore, User1 can reset User3's password. Statement 2 "User2 can update the display name of User1." ✅ Yes User2 is a User Administrator for AU1. User1 is a member of AU1, so User2 can manage User1's profile properties, including the display name. Statement 3 "User1 can reset the password of User2." ✅ Yes User1 is a Password Administrator for AU1, and User2 belongs to AU1. Therefore, User1 can reset User2's password.

• 1

  Answer: N,Y,N Reason: - A User Administrator cannot reset the password of a Password Administrator - A Password Administrator cannot reset the password of a User Administrator - They cannot reset each other’s passwords, because both are considered privileged roles ✅ Only a Global Administrator can reset passwords for all roles, including other administrators.

• 1

  User1 can reset the password of User3: No Password Administrator can reset passwords for non-admins and other Password Administrators—not for users with the User Administrator role. User3 is a tenant-wide User Administrator. Note that User1 is authorized to reset passwords for users inside AU1 and AU2, even if User1 belongs to AU1 only. Users with AU-scoped roles don’t need to be members of that AU, AU membership and AU-scoped roles are two different things. User2 can update the display name of User1: Yes User Administrator scoped to AU1 can manage user properties (like displayName) for users in AU1. User1 is in AU1. User1 can reset the password of User2: No User2 has the User Administrator role (AU1). A Password Administrator cannot reset passwords of User Administrators.