Reply To: Question being marked as incorrect although the answer is correct.

[noneofya999]

Here is the question in mind. Only the distribution group can’t be assigned, because a distribution group is used for email. The Dynamic group can’t be created unless you have an Entra ID Premium account. So it is implied that there is a Premium account for the question and Salesteam, ProjectAlpha and Contractors can be assigned permissions to the application.

This is from Gemini.

To assign access to the enterprise application <b data-path-to-node=”0″ data-index-in-node=”47″>TD-Portal, you can use group types that support security-based assignments in Microsoft Entra ID.

Based on the groups provided, here is the breakdown of which ones can be assigned:Name,Type,Can be Assigned?,Reason
TD-SalesTeam,Security Group,Yes,Standard security groups are the primary method for assigning access to enterprise apps.
TD-Announcements,Distribution Group,No,Distribution groups are for email routing only; they are not security-enabled and cannot be used for application assignments.
TD-ProjectAlpha,Microsoft 365 Group,Yes,M365 groups are security-enabled by default and can be assigned to applications.
TD-Contractors,Dynamic Membership Group,Yes,”Dynamic groups (whether Security or M365) are fully supported for app assignment, provided you have a Microsoft Entra ID P1 or P2 license.”