Your Azure AD tenant contains 5,000 users. You create a new account named AdminUser1. From the user account properties, which action will assign the User administrator role to AdminUser1?
Choose an answer
Tap an option to check your answer.
Correct answer: From the Directory role blade, modify the directory role.
Why this is the answer
To assign the User administrator role to AdminUser1, you must modify the user's directory role. The "Directory role" blade within a user's properties in Azure AD is specifically designed for managing the administrative roles assigned to that user. Selecting this blade allows you to add or remove built-in Azure AD roles like User administrator, Global administrator, or Billing administrator. Assigning a new license from the "Licenses" blade only grants access to Azure services and features associated with that license; it does not confer administrative permissions. Inviting the user to a new group from the "Groups" blade adds the user to a group, which might have roles assigned to it, but it doesn't directly assign an administrative role to the individual user account itself. While group-based role assignments are possible, the most direct method for assigning a role to an individual user is through the "Directory role" blade.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed