AZ104-Q: license versus Azure access
The finance department needs new staff to use a licensed Microsoft 365 service. They must not receive access to any Azure resources. What should an administrator do?
- A) Assign Contributor at the subscription scope.
- B) Assign the appropriate Entra license, preferably through the finance group, without creating an Azure RBAC assignment. ✓
- C) Create a resource group and tag it
finance. - D) Assign the Global Administrator Entra role.
Answer: B. An Entra license grants service entitlement. Azure RBAC grants Azure-resource permissions. Group-based licensing makes membership-driven administration scalable without granting resource access.
Why not the others: Contributor and Global Administrator are access roles, not licenses. Tags are metadata only.