Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceEasy
A company uses Azure Active Directory (Azure AD) to manage its user identities. They have a new project requiring external consultants to access specific Azure resources for a limited time. These consultants do not have existing Azure AD accounts within the company's tenant. Which feature should be used to provide these consultants with access?
- AAzure AD B2B Collaboration
- BAzure AD Connect
- CAzure AD Application Proxy
- DAzure AD Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD B2B Collaboration
Azure AD B2B Collaboration allows you to invite external users (guests) to your Azure AD tenant, granting them access to specific resources without creating full user accounts within your organization.
Why the other options are wrong
- B. Azure AD Connect synchronizes on-premises Active Directory identities with Azure AD, not for external guest access.
- C. Azure AD Application Proxy provides secure remote access to on-premises web applications for internal users.
- D. PIM manages, controls, and monitors access to important resources within your organization, typically for internal users.
Azure AD B2B Collaboration
A feature in Azure AD that allows you to invite external users (guests) to your tenant, enabling them to access your applications and resources while managing their identities in their own directory.
- Invites external users as 'guest users'
- External users authenticate with their own identity provider
- Provides controlled access to specific resources
Memory trick: B2B brings external buddies to your business.