Microsoft
AZ-104 · Question #660
Hotspot Question You have an Azure AD tenant. You need to modify the Default user role permissions settings for the tenant. The solution must meet the following requirements: - Standard users must be
Sign in or unlock AZ-104 to reveal the answer and full explanation for question #660. The question stem and answer options stay visible for context.
Submitted by luis.pe· Mar 4, 2026Manage identities and governance
Question
Hotspot Question You have an Azure AD tenant. You need to modify the Default user role permissions settings for the tenant. The solution must meet the following requirements: - Standard users must be prevented from creating new service principals. - Standard users must only be able to use PowerShell or Microsoft Graph to manage their own Azure resources. Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct answer is worth one point. Answer:
Exhibits
Answer Area
- Users can register applicationsYesNo
- Restrict non-admin users from creating tenantsYesNo
- Users can create security groupsYesNo
- Guest user access restrictionsGuest users have the same access as members (most inclusive)Guest users have limited access to properties and memberships of directory objectsGuest user access is restricted to properties and memberships of their own directory objects (most restrictive)
- Restrict access to Azure AD administration portalYesNo
- Allow users to connect their work or school account with LinkedInYesSelected groupNo
- Show keep user signed inYesNo
Unlock AZ-104 to see the answer
You've previewed enough free AZ-104 questions. Unlock AZ-104 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Entra ID default user role#Application registration#User consent settings