Question
You have a Microsoft 365 subscription.
You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role.
Which type of group should you use to assign the Reports Reader role and to access App1?
- A. a Microsoft 365 group that has assigned membership
- B. a Microsoft 365 group that has dynamic user membership
- C. a security group that has assigned membership Correct
- D. a security group that has dynamic user membership
Explanation
A security group with assigned membership is the correct choice for assigning Azure AD roles such as Reports Reader to users. Dynamic groups cannot be used for role assignments in Azure AD.
