AZ-104 · Question #343
Hotspot Question You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table. You create two user accounts that are configured as shown
The correct answer is User1 belongs to Group1 only = Yes; User2 belongs to Group1 and Group2 only = Yes. User1 belongs to Group1 only because dynamic membership rules for Azure AD groups evaluate user attributes at the time of assignment. Group1 likely has a dynamic rule based on a department or attribute that matches User1 but not User2, while Group2 has a rule (such as based on co
Question
Exhibits
Answer Area
- User1 belongs to Group1 onlyYes
- User2 belongs to Group1 and Group2 onlyYes
Explanation
User1 belongs to Group1 only because dynamic membership rules for Azure AD groups evaluate user attributes at the time of assignment. Group1 likely has a dynamic rule based on a department or attribute that matches User1 but not User2, while Group2 has a rule (such as based on company name or another attribute) that matches User2 but not User1. User2 belongs to Group1 and Group2 because their configured attributes satisfy the dynamic membership rules for both groups - typically Group1 uses an attribute common to both users (like department), while Group2 uses a secondary attribute (like company name) that only User2 possesses.
Topics
Community Discussion
No community discussion yet for this question.