AZ-104 · Question #41
Hotspot Question You have the Azure management groups shown in the following table: You add Azure subscriptions to the management groups as shown in the following table: You create the Azure…
The correct answer is User3 can perform an access review of User1 = No; User3 can perform an access review of UserA = No; User3 can perform an access review of UserB = Yes. This question involves Azure AD Access Reviews and management group/subscription scope hierarchies. User3 can only perform access reviews on users within scopes where User3 has been granted the appropriate reviewer permissions. Based on the policy and role assignments…
Question
Exhibits
Answer Area
- User3 can perform an access review of User1No
- User3 can perform an access review of UserANo
- User3 can perform an access review of UserBYes
Explanation
This question involves Azure AD Access Reviews and management group/subscription scope hierarchies. User3 can only perform access reviews on users within scopes where User3 has been granted the appropriate reviewer permissions. Based on the policy and role assignments configured in the management group and subscription hierarchy, User3 has reviewer access over UserB's scope (Subscription3/Management Group containing UserB) but not over User1's or UserA's respective scopes. Access reviews are scoped to specific groups, applications, or roles, and User3's permissions do not extend to the scopes where User1 and UserA reside.
Topics
Community Discussion
No community discussion yet for this question.