You have an Azure AD tenant that contains the users shown in the following table.
You need to compare the role permissions of each user. The solution must minimize administrative effort.
What should you use?
Exam SC-300 All QuestionsBrowse all questions from this exam
Question 62
Correct Answer: B
To compare the role permissions of each user in a Microsoft Azure AD tenant while minimizing administrative effort, one should use the Microsoft 365 admin center. The Microsoft 365 admin center provides a user-friendly interface that allows administrators to compare the permissions of different roles. Specifically, the Microsoft 365 admin center includes a feature to compare roles, which makes it easier to view and manage the role assignments and permissions among users. Other options, such as the Microsoft 365 Defender portal and Microsoft Purview compliance portal, do not focus on role management. The Microsoft Entra admin center, although related to identity management, does not provide the same streamlined role comparison feature as the Microsoft 365 admin center.
Discussion
JulesyOption: B
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/admin-roles-page#compare-roles
Alscoran
When you look at that site and the available roles, you WILL NOT see the Application Administrator listed. You do see all three when you look at Entra roles. So it must be C.
strongline
app admin is listed
Er_01
Your link compares the role not the user.
Er_01Option: B
So it is B because it actually has a “compare roles” button to compare up to 3 roles with. So the question is not about actually comparing roles, but where the menu option is to do it the MS way. More certification trivia!
bazOption: B
B. Testing we can see all role in both admin centers but 0365 admin has the option to "compare" roles.
JanioHSilva
I also tested it, it is correct
cpaljchc4Option: B
I think there's a similar question in MS-102 and answer is M365 admin
osi22Option: C
Looking at the current state (03.01.24) we have the roles available in both B and C! MS 365 Admin center - Application Administrator: Create and manage enterprise application, registrations, and proxy settings, excluding Microsoft Graph and Azure AD Graph Consent to delegated permissions and application permissions MS Entra Admin Center - Application Adminstrator: Users in this role can add, manage, and configure enterprise applications, app registrations and manage on-premises like app proxy. There's also no difference in the remaining roles, however thinking in the MS world, I still would go for C!
MacDanorldOption: B
The Answer is B. the Microsoft 365 admin center. I have tested it and all roles are there and you can compare them in the 365 admin center
penatunaOption: B
Just tested with Microsoft 365 admin center, and you can compare all three roles mentioned.
vladi72Option: C
The answer is C. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference Microsoft 365 admin center doesn't have Application Administrator role
NotanAdminOption: B
The correct answer is B. the Microsoft 365 admin center. The Microsoft 365 admin center provides a centralized location where you can view and manage the role permissions of each user in your Azure AD tenant. This will allow you to easily compare the permissions of Admin1, Admin2, and Admin3, thus minimizing administrative effort. The other options do not provide this specific functionality.
jtlucas99Option: B
If you dont include the answer choices: You should use the Azure Active Directory (Azure AD) Privileged Identity Management (PIM). Azure AD PIM provides a consolidated view of the role assignments across your organization, and it makes it easy to see who has what permissions. If you include the answer options given: B. the Microsoft 365 admin center. The Microsoft 365 admin center provides a consolidated view of the role assignments across your organization, and it makes it easy to see who has what permissions. This solution minimizes administrative effort as it provides a centralized view and management of role assignments. Please note that the other options: A. the Microsoft 365 Defender portal is primarily used for managing security threats. C. the Microsoft Entra admin center does not exist. D. the Microsoft Purview compliance portal is used for data governance and compliance, not for managing user roles and permissions.
jscaOption: B
Microsoft 365 admin center
JuanZOption: B
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide#compare-roles You can now compare permissions for up to 3 roles at a time so you can find the least permissive role to assign. In the admin center
emartiyOption: B
B is correct answer!
Er_01Option: C
All 3 accounts are listed with role permissions in both portals. Since Entra is the place for ID management, the MS answer would be C. Also, the m365 portal lists the name of each permission not the actual syntax for each user right. Again, this supports the MS answer.
AlscoranOption: C
Application Administrator not visible on M365 site
Blagojche
Application Administrator is present in M365 Admin Center, check!
Alscoran
Weird that it doesn't show in the documentation but does show up in the admin center. I cannot find a compare function on the Entra ID portal either. So I guess its B after all !
klayytech
https://admin.microsoft.com/#/rbac/directory
JaySapkotaOption: C
Entra Admin Center has all the roles
Ed2learnOption: C
I don't see Application Administrator in the Microsoft 365 admin center. Unless I am missing it, the answer is C. I suspect they are trying to make the question about the tool so perhaps in the exam they use a different role than Application Admin?
JanioHSilva
Eu acredito que você passou despercebido