Add an Administrator to Azure AD Domain

A

When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:

-> The Azure AD global administrator role

-> The Azure AD device administrator role

-> The user performing the Azure AD join

In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:

1. Sign in to your Azure portal as a global administrator or device administrator.

2. On the left navbar, click Azure Active Directory.

3. In the Manage section, click Devices.

4. On the Devices page, click Device settings.

5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

The correct answer is C. User settings from the Users blade.

When you sign up for Azure AD Premium, you can manage access to your resources by assigning roles to users, groups, and service principals. To add a user as an administrator on all computers joined to the Azure AD domain, you would need to assign them the Global Administrator role.

Here are the steps to assign the Global Administrator role to a user:

1. Go to the Azure portal and sign in with your credentials.
2. In the left-hand menu, select "Azure Active Directory."
3. Select "Users" from the list of options.
4. Select the user you want to make an administrator.
5. Under "Roles," select "Add assignment."
6. Select "Global Administrator" from the list of roles.
7. Click "Add assignment" to assign the role to the user.

Once you have assigned the Global Administrator role to the user, they will have administrative access to all computers joined to the Azure AD domain.

Option A, Device settings from the Devices blade, is not the correct answer as this is used to manage device settings such as device compliance, configuration profiles, and device enrollment.

Option B, Providers from the MFA Server blade, is not the correct answer as this is used to manage multi-factor authentication providers for Azure AD.

Option D, General settings from the Groups blade, is not the correct answer as this is used to manage group settings such as membership, settings, and licenses.