Assign User Administrator Administrative Role in Azure Active Directory (Azure AD) | AZ-300 Exam Answer

AdminUser1 - Assigning User Administrator Role | AZ-300 Exam Answer

Question

You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts. You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C.

A

Assign a role to a user -

1. Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.

2. Select Azure Active Directory, select Users, and then select a specific user from the list.

3. For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.

4. Press Select to save.

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

To assign the User administrator administrative role to AdminUser1, you need to follow these steps:

  1. Sign in to the Azure portal with an account that has permissions to manage Azure AD.
  2. Navigate to the Azure Active Directory blade.
  3. Click on the Users blade to view the list of user accounts.
  4. Select the AdminUser1 account from the list of users.
  5. In the AdminUser1 account properties, click on the Directory role blade.
  6. In the Directory role blade, click on the Add role assignment button.
  7. In the Add role assignment pane, select the User administrator role from the Directory roles list.
  8. Click on the Select button to save the role selection.
  9. Click on the Assign button to assign the User administrator role to the AdminUser1 account.

After completing these steps, the AdminUser1 account will have the User administrator role assigned to it, which will grant it the necessary permissions to manage user accounts in Azure AD.

Option A is the correct answer since it describes the process of modifying the directory role for the selected user account, which is the required step to assign the User administrator role.

Option B is incorrect because assigning a license does not grant administrative permissions to the user account.

Option C is also incorrect because inviting the user account to a new group does not grant administrative permissions to the user account.