You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table. You configure cross-tenant synchronization from contoso.com…

The correct answer is A. User1 only. In Microsoft Entra cross-tenant synchronization, only user objects are supported for synchronization across tenants. Groups (including security groups and Microsoft 365 groups) are not synchronized between tenants. Given this limitation: User1, being a user object, can be…

Submitted by yuriko_h· Mar 6, 2026Implement and manage user identities

Question

You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table. You configure cross-tenant synchronization from contoso.com to fabrikam.com. Which identities will sync with fabrikam.com?

Options

AUser1 only
BUser1 and Group1 only
CUser1 and Group2 only
DUser1, Group1, and Group2

How the community answered

(31 responses)

A
74% (23)
B
3% (1)
C
10% (3)
D
13% (4)

Explanation

In Microsoft Entra cross-tenant synchronization, only user objects are supported for synchronization across tenants. Groups (including security groups and Microsoft 365 groups) are not synchronized between tenants. Given this limitation: User1, being a user object, can be synchronized from contoso.com to fabrikam.com. Group1 (Security group) and Group2 (Microsoft 365 group) cannot be synchronized as groups are not supported for cross-tenant sync.

Topics

#cross-tenant synchronization#identity provisioning#multi-tenant#sync scope

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice