AZ-104 Exam - Question 130

Answer is B: "The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE." https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced#limitations-and-known-issues I could not find much information on the possibility of adding it to 'mail enabled' group.

Azure AD licenses can be assigned to user accounts. When you want to assign licenses to a group, the intention is to assign those licenses to the members of the group. You can assign licenses to Microsoft 365 groups and security groups, but not to mail-enabled security groups. Furthermore, the group should be security-enabled to get the licenses assigned. From the given list: Group1: Security group (Security Enabled) - You can assign licenses. Group2: Mail-enabled security group (Security Enabled) - You cannot assign licenses to mail-enabled security groups. Group3: Microsoft 365 group (Security Enabled) - You can assign licenses. Group4: Microsoft 365 group (Security Disabled) - You cannot assign licenses to security-disabled groups. The correct answer is: B. Group1 and Group3 only.

securityEnabled=TRUE so Group1, 2 ad 3 are good, is mail enbaled security group is the same a security group with some additionnal functions.

Read this and correct me if I am wrong https://techcommunity.microsoft.com/t5/microsoft-365/why-can-t-i-assign-licenses-to-every-groups-created-using-ms/m-p/2776552

Answer is D: I believe all types of Security groups must work. Here is the result of my test: Security Group: The group shows up in Group Licensing so I can select it. Mail enabled security group: This also shows up and I can select. Office 365 group: Doesn't show up in the list of groups. So, we cannot use it for group licensing. Office 365 security enabled: By default when we create O365 group we cannot enable security for that so all O365 groups are SecurityEnabled=False. But if you enable it by PowerShell, then the O365 group gets available for group licensing. Set-AzureADGroup -ObjectId -SecurityEnabled True

Mail enables security group is same like normal security group + mail functions + cannot manage via Entra as mentioned by everyone

D is correct

B - Group1, Group2 and Group3. Tested in lab to confirm. Microsoft 365 groups default to security enabled. If you disable this on the group via PowerShell (set-AzureADGroup -ObjectId {objectid} -SecurityEnabled $true) its no longer available for assignment to to a license.

i was just able to assign a license to a mail-enabled security group... but Microsoft documentation states something else.. any ideas?

Since Azure AD licenses typically require groups to have security enabled to manage memberships and assign licenses properly: Group1, Group2, and Group3 are eligible for the license assignments because they are security-enabled groups. Group4 cannot have licenses assigned directly since its security is disabled, meaning it does not manage security principals needed for direct license assignments. Therefore, the correct choice, based on the requirement that groups must have security enabled to receive Azure AD license assignments, is: D. Group1, Group2, and Group3 only

Answer B: We can not assign license to Mail enabled security group, I have tested this

Whoops wrong answer i meant D. "The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE." https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced#limitations-and-known-issues

As verified by ChatGPT 4 : D. Group 1, Group 2, and Group 3 only Group 1 can receive licenses because it is a security group. Group 2 can also receive licenses because it is a mail-enabled security group. Group 3 can receive licenses assuming it is security-enabled as suggested by its enabled status. Group 4 cannot receive licenses since it is disabled. Therefore, the correct answer is: D. Group 1, Group 2, and Group 3 only

Security groups: Yes Microsoft 365 groups: Yes Mail-enabled security groups: No Distribution groups: No If the groups mentioned include any mail-enabled security groups, those cannot be assigned the Azure AD Premium P2 licenses.

Correct answer is D. The key here is security enabled.

https://techcommunity.microsoft.com/t5/microsoft-365/why-can-t-i-assign-licenses-to-every-groups-created-using-ms/td-p/2776552 "....License can be applied for only security groups or security enabled Microsoft 365 (Unified) groups....."

Types of Groups You Can Assign Licenses To Security Groups: Standard Security Groups: These are the most common types of groups used for managing access to resources. You can assign licenses to standard security groups. Mail-Enabled Security Groups: These groups function as both security groups and distribution lists. They can also be assigned licenses. Microsoft 365 Groups (formerly Office 365 Groups): These groups include collaboration features such as shared mailboxes, calendars, and document libraries. You can assign licenses to Microsoft 365 Groups.