Creating Custom Microsoft Entra Roles

What you'll be asked

1. Which of the following is the primary benefit of using custom Microsoft Entra roles instead of built-in roles?
2. When defining a custom role in Microsoft Entra ID, which property in the JSON template is used to list the specific operations the role is allowed to perform?
3. An administrator needs to create a custom role that allows a helpdesk employee to reset passwords for non-admin users only within a specific department. To restrict this role's impact to that department, how should the role be assigned?
4. What is a requirement for the 'assignableScopes' property when creating a custom role for Microsoft Entra ID via the Microsoft Graph API?
5. A company wants to create a custom role to manage application registrations. They find that the permission 'microsoft.directory/applications/create' is required. Which of the following is true regarding the limits of custom Entra roles?

Answers and explanations come after you submit.