You have a Microsoft 365 subscription. You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role. Which type of group should you…

The correct answer is C. a security group that has assigned membership. You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group.

Submitted by satoshi_tk· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 subscription. You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role. Which type of group should you use to assign the Reports Reader role and to access App1?

Options

Aa Microsoft 365 group that has assigned membership
Ba Microsoft 365 group that has dynamic user membership
Ca security group that has assigned membership
Da security group that has dynamic user membership

How the community answered

(23 responses)

A
4% (1)
B
9% (2)
C
78% (18)
D
9% (2)

Explanation

You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group.

Topics

#Azure AD Groups#Role-Based Access Control#Enterprise Applications#Identity Management

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice