BenchMark Quizzes by MDFT Pro

Create User Accounts In External Azure AD Tenant

MDFT Pro, a well-known training agency, is expanding their educational services through partnerships and acquisitions. The company’s IT team manages multiple Azure Active Directory tenants to segregate different business units and educational programs. User1, who has Global Administrator rights, has created a new Azure AD tenant named external.contoso.onmicrosoft.com to support a newly acquired training subsidiary.

Mark, the Multi-Tenant Administrator, needs to provision user accounts in this external tenant for the new subsidiary’s trainers and administrative staff. Claire, the Identity Services Evaluator, is evaluating whether User4 can create user accounts in the external tenant with their current permissions.

User	Role	Scope
User1	Global Administrator	Azure Active Directory
User2	Global Administrator	Azure Active Directory
User3	User Administrator	Azure Active Directory
User4	Owner	Azure Subscription

The proposed solution is to instruct User4 to create the user accounts in the external tenant.

Does this solution meet the goal of creating new user accounts in external.contoso.onmicrosoft.com?

Choose the correct answer from the options below.

Explanations for each answer:

Yes is incorrect. User4 has the Owner role with Azure Subscription scope, which provides access to subscription resources but not to Azure Active Directory tenant management. Creating user accounts requires Azure AD permissions, not subscription permissions.
No is correct. User4 cannot create user accounts in the external tenant because the Owner role is scoped to the Azure subscription, not Azure Active Directory. Creating users in Azure AD requires appropriate directory roles like User Administrator or Global Administrator.
Only with additional permissions is incorrect. While additional permissions would be needed, the question asks if the current solution meets the goal. User4's current Owner role scope is insufficient for Azure AD user creation, so the solution doesn't work as presented.
Only in the original tenant is incorrect. User4's Owner role is scoped to the Azure subscription, not to either Azure AD tenant. This role doesn't provide user creation capabilities in any Azure AD tenant, including the original one.

Learn More About Azure AD Role Permissions:

Azure Active Directory Roles

Exam Preparation Quiz

Create User Accounts In External Azure AD Tenant