Question
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
| Name | Member of |
|---|---|
| Admin1 | Group1 |
| Admin2 | Group2 |
| Admin3 | Group1, Group2 |
You add the following assignment for the User Administrator role:
- Scope type: Directory
- Selected members: Group1
- Assignment type: Active
- Assignment starts: Mar 15, 2023
- Assignment ends: Aug 15, 2023
You add the following assignment for the Exchange Administrator role:
- Scope type: Directory
- Selected members: Group2
- Assignment type: Eligible
- Assignment starts: Jun 15, 2023
- Assignment ends: Oct 15, 2023
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation
Statement 1 (Yes): Admin1 is a member of Group1, which holds an active User Administrator assignment from Mar 15 to Aug 15, 2023. July 15, 2023 falls inside that window and an active assignment needs no activation, so Admin1 can reset user passwords. Statement 2 (No): Admin2 is a member of Group2, whose Exchange Administrator assignment is eligible from Jun 15 to Oct 15, 2023. An eligible assignment grants nothing until the user activates the role in Privileged Identity Management, so on June 20, 2023 Admin2 cannot manage Exchange Online just because of the assignment. Statement 3 (Yes): Admin3 is a member of Group1 as well as Group2, so the active User Administrator assignment applies. May 1, 2023 is between Mar 15 and Aug 15, 2023, so Admin3 can reset user passwords; the Exchange Administrator assignment, which has not started yet on that date, has no bearing on this.
