SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in…

Submitted by carter_n· Mar 6, 2026Manage Microsoft Entra Identity and Access - Implement and manage privileged access using Privileged Identity Management (PIM) and role-assignable groups, aligned to the SC-300 (Microsoft Identity and Access Administrator) or MS-102 certification domain.

Question

SIMULATION Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username:[email protected] Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only:

Lab Instance: 99999999 You need to create a group named Audit. The solution must ensure that the members of Audit can activate the Security Reader role. To complete this task, sign in to the appropriate admin center. Answer:

Exhibit

Explanation

The correct solution requires creating a role-assignable group in Microsoft Entra ID by enabling the 'Microsoft Entra roles can be assigned to the group' toggle during group creation, which is a one-time setting that cannot be changed after the group is created. Once the group 'Audit' is created as role-assignable, you can then assign the Security Reader role to the group through Privileged Identity Management (PIM) as an eligible assignment, allowing members to activate the role when needed. This approach leverages PIM's just-in-time access model, meaning members must explicitly activate the Security Reader role rather than having it permanently assigned, which satisfies the requirement that members 'can activate' the role.

Topics

#Microsoft Entra ID#Privileged Identity Management (PIM)#Role-Assignable Groups#Security Reader Role

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice