Microsoft 365 Administrator Expert MS-102 Practice Question
Your Microsoft Entra tenant contains users from 10 geographic locations. You need to let the Vancouver help-desk team reset passwords only for users who work in the Vancouver office. The solution must follow least-privilege principles and must not grant the technicians any additional permissions. Which configuration should you implement?
Assign the Helpdesk Administrator role to the technicians and create a conditional access policy that restricts them to accounts located in Vancouver.
Create a Vancouver administrative unit, add all Vancouver users to it, and assign the Password Administrator role to the help-desk technicians scoped to that unit.
Create a dynamic security group that includes Vancouver users and add the group to the self-service password reset configuration.
Create a privileged access group that contains the Vancouver users and make the help-desk technicians owners of the group.
Creating an administrative unit (AU) limits the scope of directory roles to the objects in that AU. After you place the Vancouver users in a Vancouver AU and assign the Password Administrator role to the help-desk technicians with that AU scope, the technicians can reset passwords for those users but cannot manage passwords for accounts outside the AU. A privileged access group, conditional access policy, or dynamic security group does not provide role-based scoping for password resets.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an Administrative Unit in Microsoft Entra?
Open an interactive chat with Bash
Why is the Password Administrator role suitable for this configuration?
Open an interactive chat with Bash
What are the limitations of using privileged access groups instead of Administrative Units?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .