HOTSPOT
-
You have an Azure Active Directory (Azure AD) tenant that contains two administrative units named AU1 and AU2.
Users are assigned to the administrative units as shown in the following table.
Users are assigned the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point
1. yes - Helpdesk Administrator can reset password for non-administrators. 2. no - Group Admin cannot reset password from any user. 3. no - Password Administrator cannot reset password from User Administrator. Ref: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
correct reasoning
this is true YNN https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
Agree with this answer
I think it should be 1. Yes Admin 1 is a Helpdesk Administrator and can reset passwords for non-administrators and Helpdesk Administrators. It will work as both are in the same admin unit 2. No Admin 2 is a group admin and cannot reset passwords from any user and definitly not in the other admin unit 3. Yes Admin 3 is a password admin in the same admin unit
Correct https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
I agree
https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords https://learn.microsoft.com/en-us/azure/active-directory/roles/admin-units-faq-troubleshoot
BOX3 should be NO, since Password Administrator Can reset passwords for non-administrators and Password Administrators and Admin 4 is user admin.
YNY https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
Password admin cannot reset for user admin. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Password Administrator - Can reset passwords for non-administrators and Password Administrators.
YNN is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Helpdesk Administrator - Can reset passwords for non-administrators and Helpdesk Administrators. Password Administrator - Can reset passwords for non-administrators and Password Administrators.
Its amazing how many incorrect answers are being propagated in this paid, contributor edition. I agree with marpengar1's answer. Fact-check everything with supporting evidence. Please check on this link which is the basis for my answers. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords 1. YES. Admin1 is a helpdesk administrator in AU1 just like user1. A helpdesk admin can reset a user with no admin role such as a user1. 2. NO. Admin2 is a groups admin in AU1 and user 3 is in AU3. According to the link, Admin2 doesn't have the privileges to reset passwords and they are in a different admin unit compared to user3. 3. NO. Admin3 is a password admin in AU2 and Admin4 is in AU2. They are both in the same AU. However, password admins do not have ability to reset the password of a user with admin privileges.
YES NO NO
in summary Y,N,N https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
Y: helpdesk admins can reset password within their AU except for admin passwords N: Admin2 can't reset any password. Groups admin doesn't grant that right and Admin2 is not even scoped to the same AU as User3 anyway... N: Password admins can't reset the password of another admin. Only User Admins can https://learn.microsoft.com/en-us/azure/active-directory/roles/admin-units-assign-roles#roles-that-can-be-assigned-with-administrative-unit-scope
y, n ,n FROM MICROSOFT: HELPDESK ADMINS: Can reset passwords for non-administrators and Helpdesk Administrators. GROUP ADMINS: Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports. PASSWORD ADMINS: Can reset passwords for non-administrators and Password Administrators.
Agree !!!
YNN 1. Yes Admin1 is helpdesk admin he can reset password for non admin users 2. No Admin2 is a group admin he can't reset password, and he is not in the same AU than user3 3. No Password admin can rester password for non admin and password admin only
It seems that there is a confusion for password admin , take a look at the table in the following link https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
Y = HELPDESK ADMINS CAN RESET THE PASSWORDS OF USERS (NON-ADMIN ONLY) N = GROUP ADMINS CANNOT RESET PASSWORDS N = PASSWORD ADMIN CANNOT RESET PASSWORD OF USER ADMIN
YNY https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
Password admin cannot reset for user admin. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference Password Administrator - Can reset passwords for non-administrators and Password Administrators.
Yes,No,Yes 1- Yes Admin1 is Helpdesk Administrator can reset password of users and other Help Desk admins only. In the box 1 one questions asks can helpdesk administrator reset password for User1 who Helpdesk administrator is also. Yes, he/she can! 2-No Admin 2 is group administrator question asks can he reset password of Password Administrator? Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports. So here No. 3-No In the 3rd box it asks can Password Administrator reset the password of User Administrator? Password Administrators can reset passwords for non-administrators and Password Administrators Ref: Microsoft Entra built-in roles - Microsoft Entra ID | Microsoft Learn
Explanation: 1. yes - Helpdesk Administrator can reset password for non-administrators.2. no - Group Admin cannot reset password from any user.3. no - Password Administrator cannot reset password from User Administrator. Reference: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-resetpasswords
YNN, in exam 4th November.
Password Administrator: Can reset passwords for non-administrators and Password Administrators only.
Yes,NO,NO Helpdesk Administrator Can reset passwords for non-administrators and Helpdesk Administrators. Groups Administrator Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports.