Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Identity and Access Administrator Associate · Microsoft
Interactive Drag & Drop Matching
Drag each configuration to its target, or tap an option then tap a target slot.
Hotspot Solution:
Following the least privilege principle, I believe that the Reports Reader role is the correct choice for User2 based on the specific requirement to review access review history reports. The Security Reader role is not necessary for this task as it focuses on security alerts and policies, which are not relevant to the requirement. Therefore: User 1: User Administrator User 2: Reports Reader
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
User 1 : User Administrator User 2 : Security Reader https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task#:~:text=Create%2C%20update%2C%20or%20delete%20access%20review%20of%20a%20group%20or%20of%20an%20app https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task#:~:text=Read%20access%20review%20of%20a%20group%20or%20of%20an%20app 1. User Administrator 2. Security Reader
To create, update, or delete access review of a group or of an app, User Administrator role is required. To read access review of a group or an app, the least privileged role is Security Reader.