A directory administrator is asked to manage one Azure subscription and assumes Global Administrator already supplies the same rights as subscription Owner. What should be recommended?

Choose the single best answer.

A.Create a management-group tag naming the administrator.
B.Grant every workload an Entra directory administrator role.
C.Evaluate and assign the required Azure resource role at the correct scope separately from the directory role.
D.Assume the two role names are equivalent.

Show the answer and explanation

✓ Correct answer

Evaluate and assign the required Azure resource role at the correct scope separately from the directory role.

Directory administration and Azure resource authorization target different systems and require separate role decisions. Global Administrator is not automatically interchangeable with subscription Owner. Workload directory-admin grants are excessive, and tags do not authorize administration. Source: AZ-305 Study Guide.pdf, PDF page(s) 13.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.