Answer-first summary for fast verification
Answer: Use Azure AD dynamic groups to assign roles to users based on their attributes, such as department or job title.
Option B is the correct answer. Using Azure AD dynamic groups allows for the automation of role assignments based on user attributes, such as department or job title. This approach is more efficient and scalable than manually assigning roles or creating custom roles. While custom roles and custom applications can also be used, they may require additional development effort and may not provide the same level of automation and flexibility as dynamic groups.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your organization has a requirement to implement a role-based access control (RBAC) system in Azure AD to manage permissions for various resources. You need to ensure that users are assigned the appropriate roles based on their job functions and responsibilities. What approach should you take to achieve this?
A
Create custom roles in Azure AD using the Azure portal and assign them to users based on their job functions.
B
Use Azure AD dynamic groups to assign roles to users based on their attributes, such as department or job title.
C
Create a custom application that uses the Microsoft Graph API to assign roles to users based on their job functions.
D
Manually assign roles to each user through the Azure portal based on their job functions.
No comments yet.