Answer-first summary for fast verification
Answer: Make User1 a Global administrator and have them arrange Azure resource access management.
The correct answer is C. In order for User1 to assign a policy to the tenant root management group, User1 needs to be a Global administrator. Azure AD Global Administrators are the only users who can elevate themselves to gain access to the root management group. Once they have the necessary access, they can assign any Azure role, including policy assignment, to other users. No one is given default access to the root management group, and assigning roles at the subscription level (as suggested in options A and B) does not grant the required permissions at the tenant root management group level. Option D is incorrect because creating a new management group does not address the need for access at the root management group level.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
In an Azure Active Directory tenant with a linked Azure subscription, how can User1 be enabled to assign policies to the tenant's root management group?
A
Grant User1 the Owner role for the Azure Subscription and adjust the default conditional access policies.
B
Provide User1 with the Owner role for the Azure subscription and guide them to set up Azure resource access management.
C
Make User1 a Global administrator and have them arrange Azure resource access management.
D
Establish a new management group, granting User1 ownership to manage policies at that level.
No comments yet.