SC-300 · Question #20
You have an Azure Active Directory (Azure AD) tenant that contains a user named SecAdmin1. SecAdmin1 is assigned the Security administrator role. SecAdmin1 reports that she cannot reset passwords…
The correct answer is B. Helpdesk administrator. Authentication administrator: can reset passwords for non-admins but can't invalidate sessions. Helpdesk administrator: Users with this role can change passwords, invalidate refresh tokens, manage service requests, and monitor service health. Invalidating a refresh token forces…
Question
You have an Azure Active Directory (Azure AD) tenant that contains a user named SecAdmin1. SecAdmin1 is assigned the Security administrator role. SecAdmin1 reports that she cannot reset passwords from the Azure AD Identity Protection portal. You need to ensure that SecAdmin1 can manage passwords and invalidate sessions on behalf of non-administrative users. The solution must use the principle of least privilege. Which role should you assign to SecAdmin1?
Options
- AAuthentication administrator
- BHelpdesk administrator
- CPrivileged authentication administrator
- DSecurity operator
How the community answered
(28 responses)- A4% (1)
- B71% (20)
- C11% (3)
- D14% (4)
Explanation
Authentication administrator: can reset passwords for non-admins but can't invalidate sessions. Helpdesk administrator: Users with this role can change passwords, invalidate refresh tokens, manage service requests, and monitor service health. Invalidating a refresh token forces the user to sign in again. Privileged Authentication Administrator: can reset all passwords (admins & non-admins) but can't invalidate any sessions. Security Operator: can't reset any passwords. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions- https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#helpdesk- https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#privileged- authentication-administrator https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#security-
Topics
Community Discussion
No community discussion yet for this question.