AdminUser1 - Assigning User Administrator Role in Azure AD | Exam AZ-104

Assigning User Administrator Role to AdminUser1 in Azure AD

Question

You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.

You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C.

B

Assign a role to a user -

1. Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.

2. Select Azure Active Directory, select Users, and then select a specific user from the list.

3. For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.

4. Press Select to save.

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

To assign the User administrator administrative role to a new user account, AdminUser1, in an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts, you need to perform the following steps:

  1. Sign in to the Azure portal with your Azure AD administrator account.

  2. In the left navigation pane, click on Azure Active Directory.

  3. In the Azure Active Directory blade, click on Users from the Manage section.

  4. In the Users blade, click on the user account, AdminUser1, that you want to assign the User administrator administrative role.

  5. In the User properties blade, click on the Directory role.

  6. In the Directory role blade, click on the Add role button.

  7. In the Add directory role blade, select the User administrator role from the roles list.

  8. Click on the Add button to assign the User administrator administrative role to AdminUser1.

After completing these steps, AdminUser1 will have the User administrator administrative role in the Azure AD tenant, which will allow them to manage user accounts and groups in the Azure AD tenant.

Option A (From the Licenses blade, assign a new license) is incorrect because assigning a license to a user account does not automatically assign administrative roles.

Option C (From the Groups blade, invite the user account to a new group) is also incorrect because adding a user account to a group does not automatically assign administrative roles.