AZ-104 Question 3
Single answerYour company recently hired several employees who need immediate access to a corporate application protected by a Microsoft Entra security group. You want the group's membership to be updated automatically based on each new employee's department attribute in Microsoft Entra ID. Which group membership type should you configure to ensure that all new employees in the 'Sales' department are automatically added to this group?
- A
Assigned group membership
- B
Dynamic user membership
- C
Dynamic device membership
- D
Microsoft 365 group membership
Show answer and explanation
Correct answer: B
Explanation
Dynamic user membership in Microsoft Entra ID lets you define rules based on user attributes. When a new employee in the 'Sales' department is created, the attribute-based membership rule automatically adds the user to the group, removing the need for manual intervention.
- A. Incorrect.
Assigned group membership requires manual addition or removal of members, which does not suit the automatic requirement.
- B. Correct.
Dynamic user membership automatically adds or removes user accounts based on defined user attributes, fulfilling the scenario’s requirement.
- C. Incorrect.
Dynamic device membership filters devices, not user attributes, so it would not automatically add employees based on their department.
- D. Incorrect.
Microsoft 365 group membership is primarily for collaboration scenarios, and it does not inherently automate user addition based on attributes.