Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceEasy
A global consulting firm uses Azure Active Directory (Azure AD) to manage its user identities. They have a new project requiring collaboration with external partners who use their own organizational identities. The firm needs to grant these external partners access to specific applications and data within their Azure AD tenant, but without creating full user accounts for them. Which Azure AD feature should the firm utilize to achieve this?
- AAzure AD Connect
- BAzure AD Domain Services (Azure AD DS)
- CAzure AD Identity Governance
- DAzure AD B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD B2B Collaboration
Azure AD B2B Collaboration allows organizations to invite external users (guests) to their Azure AD tenant, granting them access to resources while they authenticate with their own identity providers. This avoids creating full user accounts for external partners.
Why the other options are wrong
- A. Azure AD Connect synchronizes on-premises Active Directory with Azure AD, primarily for internal users.
- B. Azure AD Domain Services (Azure AD DS) provides managed domain services for legacy applications, not external user collaboration.
- C. Azure AD Identity Governance helps manage identity and access lifecycle, but B2B Collaboration is the specific feature for external partner access.
Azure AD B2B Collaboration
A feature in Azure AD that enables organizations to invite external users (guests) to access their applications and resources while managing their identities through their own identity providers.
- Allows external users to use their existing credentials.
- Provides secure access to internal applications and resources.
- Simplifies collaboration with partners, vendors, and customers.
Memory trick: B2B opens the door for partners, not new accounts.