AZ-104 Question 4
Single answerYou are an Azure Administrator for Contoso. The organization wants to simplify user access for newly created user accounts so that new hires immediately have the correct permissions and resources. You need to create a group in Azure Active Directory that automatically includes all new user accounts as soon as they are created. Which membership type should you choose?
- A
Assigned membership
- B
Dynamic user membership
- C
Dynamic device membership
- D
Microsoft 365 group
Show answer and explanation
Correct answer: B
Explanation
Dynamic user membership automatically includes new user accounts in a group based on user attributes. This meets the requirement of having new hires immediately gain access without manual intervention.
- A. Incorrect.
Requires manual addition and removal of members, so it will not automatically include new users.
- B. Correct.
Automatically adds users to the group based on their user attributes, making it ideal for immediately including new hires.
- C. Incorrect.
Relies on device attributes rather than user attributes, so it's not suitable for automatically including new user accounts.
- D. Incorrect.
Primarily used for collaboration scenarios (mailbox, calendar). It does not automatically add new user accounts based on their attributes.