You have 15 Azure subscriptions. You have an Azure Active Directory (Azure AD) tenant that contains a security group named Group1. You plan to purchase additional Azure subscription. You need to ensur

Question

Options

• AAssign Group1 the Owner role for the root management group.
• BAssign Group1 the User Access Administrator role for the root management group.
• CCreate a new management group and assign Group1 the User Access Administrator role for the
• DCreate a new management group and assign Group1 the Owner role for the group.

• A
  27% (7)
• B
  54% (14)
• C
  12% (3)
• D
  8% (2)

Explanation

To be able to assign licenses to all current and future subscriptions, while minimizing the administrative effort, one should apply the role to the Root Management Group. And because we should use the principle of least privilege we should chose the User Access Administrator role instead of the Owner one. https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

No community discussion yet for this question.