To which Azure AD role should you add User4 to meet the security requirement?
To which Azure AD role should you add User4 to meet the security requirement?
User4 needs to be able to reset User3's password, and User3 is assigned the Customer Lockbox Access Approver role. According to Azure AD role permissions, only Global Administrators have the ability to reset the passwords for users assigned to privileged roles like Customer Lockbox Access Approver. Therefore, the appropriate role assignment for User4 to meet the security requirement is Global Administrator.
Just copy from link's answer from FAQ section: Q: Can a regular user admins reset the password for members of Customer Lockbox access approver role? A: Only global admins can reset the passwords of people assigned to this role as it’s considered a privileged role. https://techcommunity.microsoft.com/t5/security-compliance-and-identity/customer-lockbox-approver-role-now-available/ba-p/223393
In exam toay
I can confirm this was in my MS-100 Exam
This question is a real bitch: https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#customer-lockbox-access-approver Customer LockBox Access Approver Manages Customer Lockbox requests in your organization. They receive email notifications for Customer Lockbox requests and can approve and deny requests from the Microsoft 365 admin center. They can also turn the Customer Lockbox feature on or off. => Only Global Administrators can reset the passwords of people assigned to this role.
My question is how manage office 365 connectors have to do with Customer Lockbox Access Approver role. one is managing connectors is exchange another is managing access requests.
By the way, it's true only Global admin can reset password for that role. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#customer-lockbox-access-approver