MD-102 · Question #526
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets…
The correct answer is A. Yes. To enable a user to rotate BitLocker recovery keys via Intune, that user must be assigned an Intune role with the specific 'Rotate BitLocker keys' permission.
Question
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune. You create a user named User1. You need to ensure that User1 can rotate BitLocker recovery keys by using Intune. Solution: From the Microsoft Intune admin center, you assign the Help Desk Operator role to User1. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(38 responses)- A74% (28)
- B26% (10)
Why each option
To enable a user to rotate BitLocker recovery keys via Intune, that user must be assigned an Intune role with the specific 'Rotate BitLocker keys' permission.
By assigning User1 an Intune role that includes the 'Rotate BitLocker keys' permission (found under 'Managed devices > Remote tasks' in Intune Role-based access control), User1 will be able to initiate the rotation of BitLocker recovery keys for managed devices directly from the Microsoft Intune admin center. This grants the necessary delegated administrative capability.
The proposed solution, if it involves assigning the correct permissions, will meet the goal.
Concept tested: Intune RBAC for BitLocker key rotation
Source: https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control#permissions-for-intune-roles
Topics
Community Discussion
No community discussion yet for this question.