Add User as Administrator in Azure AD

D

When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:

-> The Azure AD global administrator role

-> The Azure AD device administrator role

The user performing the Azure AD join

In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:

1. Sign in to your Azure portal as a global administrator or device administrator.

2. On the left navbar, click Azure Active Directory.

3. In the Manage section, click Devices.

4. On the Devices page, click Device settings.

5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

The correct answer is D. User settings from the Users blade.

Explanation: Azure Active Directory (Azure AD) is a cloud-based identity and access management (IAM) service that enables users to access cloud-based applications securely. Azure AD Premium is a paid service that provides additional features and capabilities beyond the basic Azure AD service.

To add a user as an administrator on all the computers that will be joined to the Azure AD domain, you need to configure the user settings in Azure AD. Here are the steps:

1. Sign in to the Azure portal.
2. In the left-hand menu, click on "Azure Active Directory".
3. Click on "Users" to view the list of users in your Azure AD tenant.
4. Select the user "admin1@contoso.com".
5. Click on "Directory role" in the left-hand menu.
6. Click on "Add role" and select "Global administrator" from the list of available roles.
7. Click on "Add" to add the user as a global administrator.

Once you have added the user as a global administrator, they will have full access to all the computers that are joined to the Azure AD domain.

Option A, "Providers from the MFA Server blade", is incorrect because it refers to configuring multi-factor authentication (MFA) for Azure AD, which is not related to adding a user as an administrator on all the computers in the Azure AD domain.

Option B, "General settings from the Groups blade", is incorrect because it refers to configuring general settings for groups in Azure AD, which is not related to adding a user as an administrator on all the computers in the Azure AD domain.

Option C, "Device settings from the Devices blade", is incorrect because it refers to configuring device settings in Azure AD, which is not related to adding a user as an administrator on all the computers in the Azure AD domain.