MS-102 Practice Question 3019
Exam: MS-102
Domain: Deploy and manage a Microsoft 365 tenant
Difficulty: hard
You want to implement administrative units (AUs) in Microsoft Entra ID so regional helpdesk technicians can reset passwords only for staff in Chicago. What is a key constraint regarding administrative unit scope?
Answer Options
A
Administrative units delegate permissions over scoped users, groups, and devices
B
Administrative units can only delegate Global Administrator permissions
C
Administrative units automatically mirror on-premises Active Directory OUs
D
Administrative units cannot contain Microsoft Entra security groups
Correct Answer
A: Administrative units delegate permissions over scoped users, groups, and devices
Explanation
Administrative units allow scoping roles (like Helpdesk or User Administrator) strictly to users, groups, or devices placed explicitly inside that AU container.