About AZ-104, set 2, question 30

[mrmumse]

I would like a deeper explanation of this question. I don’t understand the reasoning behind the answer. See below.

I want the group the be deleted after 180 days, then why would I choose “Assigned membership”?

As I understand the reasoning the answer would be only 1: “Set up a dynamic membership on M365 groups.”.

—

30. Question
Category: AZ-104 – Manage Azure Identities and Governance

You are managing a Microsoft Entra ID tenant and a Microsoft 365 tenant.

You need to grant several users who must belong to the same Azure group temporary access to the Microsoft SharePoint document library. The group must automatically be deleted after 180 days for compliance purposes.

[Irene-TutorialsDojo]

Hi mrmumse,

Thank you for your question! Let me clarify the reasoning for you:

Both assigned and dynamic membership can be used with Microsoft 365 groups to meet the requirement of deleting the group after 180 days. The key point is that group expiration policies are applied to Microsoft 365 groups, not how users are added.

1. Assigned membership means users are manually added to the group. Even with assigned membership, you can still set an expiration policy to delete the group after 180 days automatically.

2. Dynamic membership automatically adds or removes users based on attributes like job role or department. Similarly, you can apply an expiration policy to dynamically populated groups, ensuring the group is deleted after the specified period.

In short, both options work because the expiration policy applies to the Microsoft 365 group itself, not the membership method. So, Option 3 (Assigned membership on Microsoft 365 groups) is just as valid as Option 1 (Dynamic membership on Microsoft 365 groups).

Let me know if this helps or if you have any more questions!

Regards,

Irene @ Tutorials Dojo

[mrmumse]

Thanks for the thorough explication!

I read the answer as both options were necessary, but then it’s actually one or the other? Then it makes sense.

Please confirm.

[Irene-TutorialsDojo]

Hi mrmumse,

Yes, that’s correct! 😊

You don’t need to use both options. Either one will work — you can choose assigned membership or dynamic membership. What matters is that it’s a Microsoft 365 group so that you can apply the expiration policy.