Assigning E5 License Automatically to Management Department | MS-500 Exam Answer

Correct Answer: A

Best approach here is to create a dynamic membership security rule that will automatically include all users in the Management-department.

By assigning the license to the security group, all users within the group will be licensed.

Option B is incorrect.

This will not assign the licenses automatically and would be time-consuming.

Option C is incorrect.

Access reviews are typically used to scope out user access and assignments.Not the way to go here.

Option D is incorrect.

This will not assign the licenses automatically and is time-consuming.

To know more about azure AD dynamics groups, please refer to the link below:

The best option to ensure that all users in the Management department are assigned the E5 license automatically with the least amount of management on your end is option A: In Azure Active Directory, create a security group with dynamic membership rules. Set the rule property to department and value to “Management”, and then assign the E5 license to the security group.

Here's why:

Option A: In Azure Active Directory, create a security group with dynamic membership rules. Set the rule property to department and value to “Management”, and then assign the E5 license to the security group.

This option is the best because it allows you to automate the process of assigning E5 licenses to all users in the Management department. With dynamic group membership rules, you can automatically add or remove users from the group based on certain criteria, such as their department. This means that any new users added to the Management department will automatically be added to the security group and be assigned the E5 license without any manual intervention.

To implement this option, you will need to follow these steps:

1. Sign in to the Azure portal and navigate to the Azure Active Directory resource.
2. Click on Groups and then click on New Group.
3. Enter a name for the group (e.g., "Management E5 Group") and select Security as the group type.
4. Under Membership type, select Dynamic User.
5. In the Dynamic user properties section, set the rule property to Department and the value to "Management".
6. Click on Create to create the group.
7. After the group is created, click on Licenses and then click on Assignments.
8. Select the E5 license and click on Assign.
9. Select the newly created Management E5 Group and click on Assign.

Option B: Assign the license manually when creating the new users.

This option is not ideal as it requires manual intervention for each new user added to the Management department. This will result in additional management overhead and is prone to errors if the license assignment is not done correctly.

Option C: Create an access review.

An access review is a process for reviewing user access to resources, but it does not automate the process of assigning licenses. This option may be useful in ensuring that only the appropriate users have access to the E5 license, but it does not address the requirement to automatically assign the license to all users in the Management department.

Option D: Create a powershell script that assigns E5 license to Management-users and run it weekly.

This option is also not ideal as it requires manual intervention to run the script and is prone to errors if the script is not executed correctly. Additionally, this approach does not provide an automated way to ensure that new users in the Management department are assigned the E5 license.