Entra Roles RBAC Quiz

What you'll be asked

1. Which Microsoft Entra feature allows you to grant access to users only for a specific, time-bound duration?
2. An administrator needs to assign a user the ability to manage passwords for non-administrative users but should not be able to change passwords for other global admins. Which role is most appropriate?
3. When using Azure RBAC on a management group, which of the following is true regarding permission inheritance?
4. You have a custom RBAC role that is no longer needed. What is the recommended best practice for removing it?
5. A user is assigned the 'User Administrator' role at the tenant root scope and a 'Reader' role on a specific subscription. What is the user's effective access level?

Answers and explanations come after you submit.