You have a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can configure the Guest user access restrictions settings for contoso.com. The solution must follow…

The correct answer is B. User Administrator. Restrict guest access permissions in Microsoft Entra ID Update in the Microsoft Entra admin center *-> 1. Sign in to the Microsoft Entra admin center as a User administrator. 2. Select Identity > External Identities. 3. Select External collaboration settings. 4. On the External…

Submitted by miguelv· Mar 6, 2026Secure identity and access

Question

You have a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can configure the Guest user access restrictions settings for contoso.com. The solution must follow the principle of least privilege. Which role should you assign to User?

Options

AGlobal Administrator
BUser Administrator
CExtended Directory User Administrator
DGlobal Secure Access Administrator

How the community answered

(33 responses)

A
12% (4)
B
76% (25)
C
3% (1)
D
9% (3)

Explanation

Restrict guest access permissions in Microsoft Entra ID Update in the Microsoft Entra admin center *-> 1. Sign in to the Microsoft Entra admin center as a User administrator. 2. Select Identity > External Identities. 3. Select External collaboration settings. 4. On the External collaboration settings page, select Guest user access is restricted to properties and memberships of their own directory objects option. 5. Select Save. The changes can take up to 15 minutes to take effect for guest users. https://learn.microsoft.com/en-us/entra/identity/users/users-restrict-guest-permissions

Topics

#Entra ID roles#guest access restrictions#User Administrator#least privilege

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice