Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Identity and Access Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
Option1) User5 User2 holds the Helpdesk Administrator role, but its execution scope is strictly limited to AU1. Therefore, User2 can only manage users within AU1 (User3, User4, User5). Under Microsoft Entra ID RBAC delegation rules for Administrative Units, a Helpdesk Administrator scoped to an AU is authorized to reset passwords for non-administrative accounts (User5). User2 cannot reset credentials for User3 (Privileged Authentication Administrator, high-privilege boundary) nor User1/User2 (residing outside scope in AU2). Option2) User1 and user2 User3 is assigned the Privileged Authentication Administrator role with scope restricted to AU2. Members of AU2 are User1 and User2. The Privileged Authentication Administrator role possesses top-tier credential management privileges, allowing it to reset passwords for all user types within its assigned scope—including Global Administrators (User1) and Helpdesk Administrators (User2).
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Helpdesk admin cannot reset the password other help desk admins. priveiledge authentication admin can reset the password of other admins, picture is correct
Option1) User5 User2 holds the Helpdesk Administrator role, but its execution scope is strictly limited to AU1. Therefore, User2 can only manage users within AU1 (User3, User4, User5). Under Microsoft Entra ID RBAC delegation rules for Administrative Units, a Helpdesk Administrator scoped to an AU is authorized to reset passwords for non-administrative accounts (User5). User2 cannot reset credentials for User3 (Privileged Authentication Administrator, high-privilege boundary) nor User1/User2 (residing outside scope in AU2). Option2) User1 and user2 User3 is assigned the Privileged Authentication Administrator role with scope restricted to AU2. Members of AU2 are User1 and User2. The Privileged Authentication Administrator role possesses top-tier credential management privileges, allowing it to reset passwords for all user types within its assigned scope—including Global Administrators (User1) and Helpdesk Administrators (User2).