nerdexam
Microsoft

SC-300 · Question #387

Hotspot Question You have a Microsoft Entra tenant that contains a user named User1. You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1. You need to ensure that User1

Sign in or unlock SC-300 to reveal the answer and full explanation for question #387. The question stem and answer options stay visible for context.

Submitted by andres_qro· Mar 6, 2026Plan and implement workload identities

Question

Hotspot Question You have a Microsoft Entra tenant that contains a user named User1. You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1. You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege. Which role should you assign for Sub1, and which role should you assign to User1 for the tenant? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Answer Area

  • Sub1:
    OwnerReaderSecurity ReaderUser Access Administrator
  • Tenant:
    Global AdministratorGlobal Secure Access AdministratorPermissions Management AdministratorSecurity Administrator

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Entra Permissions Management#least privilege#User Access Administrator#Permissions Management Administrator
Full SC-300 Practice