AZ-104 Question 9
Single answerYou work as an Azure Administrator for Contoso, Inc. The HR department recently changed the reporting structure for 50 employees in the marketing department. You need to update each user’s manager property in Azure Active Directory to reflect the newly assigned manager and ensure these users are also members of a specific Azure AD security group. Which method provides the most efficient way to perform these changes in bulk?
- A
Manually update each user profile in the Azure portal and add users to the group individually
- B
Use the Azure AD PowerShell module to update the Manager attribute and assign group membership in bulk
- C
Create a new dynamic security group that automatically assigns membership based on the users’ manager attribute
- D
Enable Azure AD Premium P2 licenses for all users to automatically sync manager information from on-premises Active Directory
Show answer and explanation
Correct answer: B
Explanation
The Azure AD PowerShell module enables efficient bulk updates to user properties and security group memberships. It saves time and reduces the chance of errors compared to manual updates in the Azure portal.
- A. Incorrect.
Manually updating each user is time-consuming and error-prone, especially when dealing with large groups.
- B. Correct.
Using the Azure AD PowerShell module allows you to script and automate bulk changes efficiently, including updates to the Manager field and group membership.
- C. Incorrect.
Dynamic group membership can automate group assignments based on user attributes, but it does not update the Manager property for users.
- D. Incorrect.
Azure AD Premium P2 does not automatically update the manager attribute. License tiers do not replace the need to update user properties or to configure directory synchronization properly.