AZ104-Q: grant a partner controlled access
A partner needs access to one project resource group using their existing corporate identity. The project team wants membership to be easy to remove when the engagement ends. What should it do?
- A) Create a shared permanent Global Administrator account.
- B) Invite the partner as an Entra B2B guest, add the guest to a project access group, and assign that group a least-privilege role at the resource-group scope. ✓
- C) Give the partner the storage-account access key.
- D) Make the resource group public.
Answer: B. A guest identity plus group-based RBAC gives a removable, scoped access path and avoids sharing credentials.
Why not the others: Global Administrator and access keys are excessive. Resource groups are not made public for collaboration.
Related
entraid · user-account · groups · rbac