Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-500 Exam - Topic 1 Question 89 Discussion

You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of Azure AD Connect.You create a new Azure subscriptionYou discover that the synced on-premises user accounts cannot be assigned rotes in the new subscription.You need to ensure that you can assign Azure and Microsoft 365 roles to the synced Azure AD user accounts.What should you do first?
A) Change the Azure AD tenant used by the new subscription.
B) Configure the Azure AD tenant used by the new subscription to use pass-through authenticate
C) Configure the Azure AD tenant used by the new subscription to use federated authentication.
D) Configure a second instance of Azure AD Connect.

Microsoft AZ-500 Exam - Topic 1 Question 89 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 89
Topic #: 1
[All AZ-500 Questions]

You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of Azure AD Connect.

You create a new Azure subscription

You discover that the synced on-premises user accounts cannot be assigned rotes in the new subscription.

You need to ensure that you can assign Azure and Microsoft 365 roles to the synced Azure AD user accounts.

What should you do first?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Fausto at Aug 15, 2025, 07:11 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shanda
7 months ago
B sounds interesting, but I'm not sure it will solve the issue.
upvoted 0 times
...
Lynna
8 months ago
Wait, can you really assign roles without changing the tenant?
upvoted 0 times
...
Werner
8 months ago
I think configuring federated authentication is the way to go!
upvoted 0 times
...
Rosendo
8 months ago
Definitely not D, that just complicates things.
upvoted 0 times
...
Tonette
8 months ago
You need to change the Azure AD tenant for the new subscription.
upvoted 0 times
...
Verdell
9 months ago
I vaguely recall that roles can only be assigned if the Azure AD tenant is set up correctly, but I'm not confident about which option to choose here.
upvoted 0 times
...
Wendell
9 months ago
I feel like configuring a second instance of Azure AD Connect might complicate things, but I can't remember the exact implications of that choice.
upvoted 0 times
...
Georgeanna
9 months ago
I think I practiced a question similar to this where we had to configure authentication methods, but I can't recall if pass-through or federated was better for this scenario.
upvoted 0 times
...
Tasia
9 months ago
I remember something about needing to ensure the Azure AD tenant is properly linked to the subscription, but I'm not sure if changing the tenant is the right move.
upvoted 0 times
...
Lai
9 months ago
Alright, I've got a plan. I'll start by looking at the current Azure AD tenant configuration and see if I can spot any issues there. Then I'll consider the options presented and choose the one that seems most likely to resolve the problem.
upvoted 0 times
...
Tamie
10 months ago
Ah, I see. This is all about authentication and making sure the synced user accounts can be properly assigned roles. I'll need to review my notes on Azure AD authentication methods.
upvoted 0 times
...
Earnestine
10 months ago
Okay, let's see here. I think the key is figuring out how the Azure AD tenant is set up and configured. That should give me a clue on the best approach.
upvoted 0 times
...
Bernadine
10 months ago
Hmm, this seems like a tricky one. I'll need to think through the options carefully to make sure I don't miss anything.
upvoted 0 times
...
Vallie
10 months ago
Hmm, I'm not sure. B might work, but I'm leaning towards C. Federated authentication sounds like the most straightforward solution here.
upvoted 0 times
...
Shaunna
11 months ago
D is the way to go. A second instance of Azure AD Connect will sync the on-premises accounts to the new subscription's Azure AD tenant.
upvoted 0 times
...
Jean
11 months ago
I think we should configure the Azure AD tenant to use pass-through authentication.
upvoted 0 times
...
Lindsay
11 months ago
I think the answer is C. Federated authentication seems like the right way to ensure the synced user accounts can be assigned roles in the new subscription.
upvoted 0 times
Deane
7 months ago
D sounds interesting. A second instance of Azure AD Connect could help.
upvoted 0 times
...
Kent
7 months ago
I think A might be the way to go. Changing the tenant could solve the issue.
upvoted 0 times
...
Catarina
7 months ago
I’m not sure about C. Isn’t federated authentication more complex?
upvoted 0 times
...
Bernardine
8 months ago
I agree with Catarina. C seems complicated for just assigning roles.
upvoted 0 times
...
...

Save Cancel