You need to ensure that only users that are assigned the Global Administrator, User Administrator, or Guest Inviter roles can invite guest users to your company's tenant. To complete this task, sign…

Question

Exhibit

Explanation

To control who can invite guest users in a Microsoft 365 tenant, the correct administrative center to use is the Azure Active Directory admin center.

Approach. The task specifies controlling who can invite guest users to the company's tenant, restricting this ability to specific roles like Global Administrator, User Administrator, or Guest Inviter. These settings are part of the external collaboration settings within Azure Active Directory (now Microsoft Entra ID). Azure AD is the identity and access management service for Microsoft 365, and all tenant-wide guest invitation policies are configured in its administrative portal. Therefore, to accomplish this task, an administrator would need to navigate to and make changes within 'The Azure Active Directory admin center'. Given that both 'User1' and 'User2' have identical options for the same single task, both selections should be 'The Azure Active Directory admin center'.

Common mistakes.

• common_mistake. Selecting 'The Microsoft Teams admin center' is a common mistake because while guest users frequently collaborate within Microsoft Teams, the overarching tenant-wide policy for who can invite guests is not managed there. The Teams admin center primarily handles Teams-specific configurations. Choosing 'The Set-CsUser cmdlet' is incorrect because this PowerShell cmdlet is used for managing Skype for Business Online user properties, which is irrelevant to controlling guest invitation policies in Azure Active Directory.

Concept tested. The core concept tested is the ability to identify the correct administrative portal or tool for managing tenant-wide identity and access management settings, specifically guest user invitation policies and external collaboration settings, within a Microsoft 365 environment. It assesses knowledge of the functions and scope of different Microsoft 365 admin centers (Azure AD vs. Teams) and the appropriate use of PowerShell cmdlets.

No community discussion yet for this question.