-
In your https://tutorialsdojo.com/microsoft-entra-id/ cheatsheet there is a error maybe.
Group Types:
- Security – it contains users, devices, groups, and service principals as its members. The users and service principals are the owners of this group.
In the according Question Review Mode Set 2 – AZ-104 Azure Administrator Question 30. The correct explanation is given. This can lead to confusion. Or am I missing something?
The options that say: Set up an assigned membership on security groups and Set up a dynamic membership on security groups are incorrect because security groups can only be used for devices or users and not for groups.
- Security – it contains users, devices, groups, and service principals as its members. The users and service principals are the owners of this group.
-
Hi axel77777777,
Thank you for bringing this to our attention!
You’re absolutely right — the original rationale in that question could be a bit confusing, especially considering that security groups can contain users, devices, groups, and service principals as members. We’ve reviewed this and have updated the explanation to more accurately reflect the limitation in the context of group expiration policies, which is the key requirement in the scenario.
The updated rationale now clarifies that security groups are primarily used for access control and do not support expiration policies, so they’re unsuitable for scenarios requiring automatic group deletion.
We appreciate your feedback, and we’ve made the change to help avoid any further confusion.
Best regards,
Irene @ Tutorials Dojo
Log in to reply.