Question
Hotspot Question You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table: User3 is the owner of Group1. Group2 is a member of Group1. You configure an access review named Review1 as shown in the following exhibit: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:
Exhibits
Answer Area
- User3 can perform an access review of User1No
- User3 can perform an access review of UserAYes
- User3 can perform an access review of UserBYes
Explanation
Review1 is configured as an access review of Group1, with User3 (the group owner) as the reviewer. Group1's direct members are reviewed, which includes any users directly in Group1 and nested groups like Group2. UserA and UserB are members of Group2, which is a nested member of Group1, so User3 can review them as part of the access review scope. User1 is NOT a member of Group1 or Group2 - User1 is only a member of a different group or has no membership in Group1's hierarchy - therefore User3 cannot perform an access review of User1 under Review1.
Topics
#Azure AD Access Reviews#Identity Governance#Group Membership#Nested Groups
Community Discussion
No community discussion yet for this question.