az-104 Practice Question 1692
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage Microsoft Entra ID
Difficulty: medium
Contoso Ltd is facing issues with guest accounts not being able to access resources in their Azure environment. The IT team suspects that the issue might be related to the guest account permissions. What should they do to ensure guest accounts have the necessary permissions to access resources?
Answer Options
A
Remove guest accounts from the organization.
B
Assign Azure roles or Microsoft Entra ID groups to guest accounts.
C
Configure resource-level permissions for each guest account.
D
Disable guest accounts until they can be granted full access.
Correct Answer
B: Assign Azure roles or Microsoft Entra ID groups to guest accounts.
Explanation
The correct answer is B. To ensure guest accounts have the necessary permissions to access resources in the Azure environment, the IT team should assign the appropriate roles to the guest accounts through Azure roles or Microsoft Entra ID groups. This ensures that guest accounts have the required permissions without granting them full access to sensitive resources. Option A is incorrect because it does not address the issue of assigning permissions to guest accounts. Option C is incorrect as it refers to managing permissions at the resource level, which is not the best practice for guest accounts. Option D is incorrect because it suggests removing guest accounts, which would not solve the issue of accessing resources.