1 - SC-300: Implement An identity Management
Solution Exam Study Guide
What are the Permissions for this Azure AD Role?
Global Administrator - ANSWER 1. Manage access to all administrative features in Azure
Active Directory, as well as services that federate to Azure Active Directory
2. Assign administrator roles to others
3. Reset the password for any user and all other administrators
What are the Permissions for this Azure AD Role?
User Administrator - ANSWER 1. Create and manage all aspects of users and groups
2. Manage support tickets
3. Monitor service health
4. Change passwords for users, Helpdesk administrators, and other User Administrators
What are the Permissions for this Azure AD Role?
Billing Administrator - ANSWER 1. Make purchases
2. Manage subscriptions
3. Manage support tickets
4. Monitors service health
What is the Difference between Azure roles and Azure AD roles? - ANSWER Azure roles
, control permissions to manage Azure resources, while Azure AD roles control
permissions to manage Azure AD resources
2 Key Differences between Azure Roles and AzureAD roles - ANSWER 1. Azure - Scope
can be specified at multiple levels (management group, subscription, resource group,
resource)
1. AzureAD - Scope is at the tenant level
2. Azure - Role information can be accessed in Azure portal, Azure CLI, Azure PowerShell,
Azure Resource Manager templates, REST API
2. AzureAD - Role information can be accessed in Azure admin portal, Microsoft 365
admin center, Microsoft Graph, Azure AD PowerShell
Do Azure roles and Azure AD roles overlap? - ANSWER No, by default, Azure roles and
Azure AD roles do not span Azure and Azure AD.
True or False
By default, the Global Administrator doesn't have access to Azure resources. - ANSWER
True
5 Methods for assigning Roles in AzureAD - ANSWER 1. Assign a role to a user or group
2. Assign a user or group to a role
3. Assign a role to a broad-scope, like a Subscription, Resource Group, or Management
Group
Solution Exam Study Guide
What are the Permissions for this Azure AD Role?
Global Administrator - ANSWER 1. Manage access to all administrative features in Azure
Active Directory, as well as services that federate to Azure Active Directory
2. Assign administrator roles to others
3. Reset the password for any user and all other administrators
What are the Permissions for this Azure AD Role?
User Administrator - ANSWER 1. Create and manage all aspects of users and groups
2. Manage support tickets
3. Monitor service health
4. Change passwords for users, Helpdesk administrators, and other User Administrators
What are the Permissions for this Azure AD Role?
Billing Administrator - ANSWER 1. Make purchases
2. Manage subscriptions
3. Manage support tickets
4. Monitors service health
What is the Difference between Azure roles and Azure AD roles? - ANSWER Azure roles
, control permissions to manage Azure resources, while Azure AD roles control
permissions to manage Azure AD resources
2 Key Differences between Azure Roles and AzureAD roles - ANSWER 1. Azure - Scope
can be specified at multiple levels (management group, subscription, resource group,
resource)
1. AzureAD - Scope is at the tenant level
2. Azure - Role information can be accessed in Azure portal, Azure CLI, Azure PowerShell,
Azure Resource Manager templates, REST API
2. AzureAD - Role information can be accessed in Azure admin portal, Microsoft 365
admin center, Microsoft Graph, Azure AD PowerShell
Do Azure roles and Azure AD roles overlap? - ANSWER No, by default, Azure roles and
Azure AD roles do not span Azure and Azure AD.
True or False
By default, the Global Administrator doesn't have access to Azure resources. - ANSWER
True
5 Methods for assigning Roles in AzureAD - ANSWER 1. Assign a role to a user or group
2. Assign a user or group to a role
3. Assign a role to a broad-scope, like a Subscription, Resource Group, or Management
Group
