MS-102 Question #452: Real Exam Question with Answer & Explanation

Question

You have a Microsoft Azure Active Directory (Azure AD) tenant. The organization needs to sign up for Microsoft Store for Business. The solution must use the principle of least privilege. Which role should you assign to the user?

Options

• AGlobal administrator
• BCloud application administrator
• CApplication administrator
• DService administrator

Explanation

To sign up for Microsoft Store for Business, the Global administrator role is typically required due to the broad permissions needed for initial tenant-level service integration.

Common mistakes.

• B. The Cloud application administrator role can manage all aspects of enterprise applications but typically does not have the broad tenant-level permissions required for signing up for new Microsoft services like Store for Business.
• C. The Application administrator role has more limited permissions than the Cloud application administrator, focusing on enterprise applications, and is insufficient for the initial signup of Microsoft Store for Business.
• D. The Service administrator role is a legacy concept often associated with classic portal roles and does not map directly to the specific Azure AD permissions required for signing up for Microsoft Store for Business under the principle of least privilege.

Concept tested. Azure AD roles for service integration

Reference. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

No community discussion yet for this question.