Azure Administrator (AZ-104) · Free practice question 1 of 12
Elevate Global Administrator access
The Global Administrator at Beacon Hill Nursing can manage Microsoft Entra ID but cannot see several Azure subscriptions created by another team. She needs temporary access to manage role assignments in all subscriptions and management groups in the tenant. What should she do?
- A.Assign herself the Billing Administrator role
- B.Turn on Access management for Azure resources in the Microsoft Entra ID properties to elevate her access
- C.Create a new management group and move the subscriptions into it
- D.Invite herself as a guest user to each subscription
Show answer and explanation
Correct answer: B. Turn on Access management for Azure resources in the Microsoft Entra ID properties to elevate her access
Why: Enabling Access management for Azure resources elevates a Global Administrator to the User Access Administrator role at root scope, allowing her to view and assign access to all subscriptions and management groups; it should be turned off after use. Billing roles do not grant RBAC permissions, and she cannot move subscriptions she has no access to. Guest invitations apply to users from other tenants.
More free Azure Administrator (AZ-104) questions
- Registering a resource provider
- Static website hosting in Storage
- Secure transfer required setting
- Spot VMs for interruptible workloads
- Proximity placement groups
- App Service Always On
- Regional service tags in NSG rules
- NAT gateway for predictable outbound IP
- Azure DNS alias record at apex
- Metric alerts with dynamic thresholds
- Service Health alerts