nerdexam
Microsoft

SC-300 · Question #319

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Microsoft Entra. You gain…

The correct answer is A. Update-MgPolicyAuthorizationPolicy. Use the "Update-MgPolicyAuthorizationPolicy" cmdlet with the "AllowedToSignUpEmailBasedSubscriptions" parameter set to False. https://learn.microsoft.com/en-us/entra/identity/users/directory-self-service-signup

Submitted by olafpl· Mar 6, 2026Implement and manage user identities

Question

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Microsoft Entra. You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Microsoft Entra tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?

Options

  • AUpdate-MgPolicyAuthorizationPolicy
  • BUpdate-MgDomain
  • CUpdate-MgPolicyPermissionGrantPolicyExclude
  • DUpdate-MgDomainFederationConfiguration

How the community answered

(42 responses)
  • A
    83% (35)
  • B
    2% (1)
  • C
    5% (2)
  • D
    10% (4)

Explanation

Use the "Update-MgPolicyAuthorizationPolicy" cmdlet with the "AllowedToSignUpEmailBasedSubscriptions" parameter set to False. https://learn.microsoft.com/en-us/entra/identity/users/directory-self-service-signup

Topics

#self-service sign-up#authorization policy#PowerShell#tenant settings

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-300 Practice