SC-300 Certification Practice Question #74

Question

You have a Microsoft Entra tenant that contains the users shown in the following table.

The tenant contains the identities shown in the following table.

Which users can create custom security attributes, and to which identities can the attributes be assigned? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

MS Learn is explicit on both rows. For Row 1, the Attribute Definition Administrator role is the minimum role to define/create custom security attributes, and Global Administrator (User1) and Security Administrator (User3) have no such permission by default — leaving **User2 only**. For Row 2, custom security attributes can be assigned only to Microsoft Entra **users** and **enterprise applications (service principals)**; of the listed identities, only Service1 is a service principal, while Group1 (security group) is unsupported and a managed identity (MI1) is not an enterprise-application service principal — so **Service1 only**. The highest-upvoted comments (csi_2025, anonymousarpanch, each 👍 4, the latter citing the exact Learn page) corroborate both selections. Confidence is 86% rather than higher because the file carries no Suggested Answer or vote tallies, and a couple of low-vote comments incorrectly include the Global Admin or MI1/Group1 — but those are directly refuted by the cited documentation.

More SC-300 practice questions