Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 6)

Questions 26–29

1. 26application · easy

   A company has a team that is responsible for managing user accounts, resetting passwords, and managing groups. They do not need to manage security settings or other administrative functions. Which built-in Microsoft Entra role should be assigned to this team?

   • AHelpdesk Administrator
   • BAuthentication Administrator
   • CGlobal Administrator
   • DUser Administrator
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to allow a user to manage Microsoft Entra ID groups, including creating and deleting groups, but NOT manage users or reset passwords. Which built-in role should be assigned?

   • AUser Administrator
   • BGroups Administrator
   • CDirectory Writers
   • DGlobal Administrator
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary reason to create a custom role in Microsoft Entra ID?

   • ATo automatically assign permissions to all users in the tenant
   • BTo grant a specific set of permissions that is not available in any built-in role
   • CTo replace the Global Administrator role with a more secure role
   • DTo allow users to create their own roles
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company wants to allow a user to manage Microsoft Entra ID settings, such as branding and external collaboration settings, but NOT manage users, groups, or roles. Which built-in role should be assigned?

   • AGlobal Administrator (or a custom role with specific permissions)
   • BUser Administrator
   • CGlobal Administrator
   • DDirectory Writers
   Reveal Solution Discussion Select an answer first