SC-300 Certification Practice Question #28

Question

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You have an administrative unit named Au1. Group1, User2, and User3 are members of Au1.

User5 is assigned the User administrator role for Au1.

For which users can User5 reset passwords?

Accepted Answer

Au1's members are Group1 (the group object), User2, and User3. Per MS Learn, a User Administrator scoped to an administrative unit can manage the group object's name/membership but cannot reset passwords of the group's individual members unless those users are added to the AU directly. User2 and User3 are added directly, so they are in scope. User1 reaches Au1 only through Group1's membership, which does not bring it into management scope, so its password cannot be reset. The official Suggested Answer, the 58-vote community pick, two highly-voted comments (one lab-tested), and the MS Learn documentation all agree on D, with no credible dissent in the thread.

More SC-300 practice questions