nerdexam
Microsoft

AZ-500 · Question #571

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is A. Yes. You set Group1 as the Microsoft Entra admin for SQL1. Either use a Security Group or a User. You set MI1 as the Microsoft Entra admin for SQL1. MI1 is a user-assigned managed identity. User1 and User2 are both assigned the owner rule for MI1. MI1 is set as Microsoft Entra admin…

Submitted by daniela_cl· Mar 6, 2026Secure compute, storage, and databases

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the resources shown in the following table. You have the users shown in the following table. You create an Azure SQL managed instance named SQL1 and enable Microsoft Entra-only authentication. You need to ensure that both User1 and User2 are set as the Microsoft Entra admin for SQL1. Solution: You set MI1 as the Microsoft Entra admin for SQL1. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(34 responses)
  • A
    76% (26)
  • B
    24% (8)

Explanation

  • You set Group1 as the Microsoft Entra admin for SQL1. Either use a Security Group or a User. * You set MI1 as the Microsoft Entra admin for SQL1. MI1 is a user-assigned managed identity. User1 and User2 are both assigned the owner rule for MI1. MI1 is set as Microsoft Entra admin for SQL1. When a user is assigned the Owner role for a user-assigned managed identity, they can utilize the permissions associated with that role. This means the user can manage the managed identity itself, as well as perform any action allowed by the Owner role within the specified scope (e.g., subscription, resource group). * You set App1 as the Microsoft Entra admin for SQL1. Need a user or a group, not an application. * You set Group2 as the Microsoft Entra admin for SQL1. Cannot use a Microsoft 365 group. You can manage two types of groups in the Microsoft Entra admin center: *-> Security groups: Used to manage access to shared resources. Members of a security group can include users, devices, service principals. Groups can be members of other groups, sometimes known as nested groups. Users and service principals can be the owner of a security group. Microsoft 365 groups: Provide collaboration opportunities. * Members of a Microsoft 365 group can only include users. Users and service principals can be the owner of a Microsoft 365 group. People outside of your organization can be members of a group. https://learn.microsoft.com/en-us/entra/fundamentals/concept-learn-about-groups

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice