A company has an Office 365 tenant.
You plan to use Active Directory Federated Services for user authentication. You create an account named SyscService in Active Directory and in Office 365. You
must configure the permissions for the accounts in both environments by granting the minimum permissions required.
In the table below, identify the role that you must assign to each account/ Note: Make only one selection in each column. Each correct answer is worth one point.
Answer: 
Explanation:
Right Answer is follow:
Active Directory = Domain User
Office 365 = Global Administrator
0
0
Are you sure the answer? Should it be
Active Directory = User management admin
Office 365 = Global Administrator
can someone please confirm?
1
0
you can find DOMAIN USERS group from active directory, but you do not find USER MANAGEMENT ADMINS group
0
1
To grant minimum permissions, should it be:
Active Directory = Domain User
Office 365 = User Management Admin
0
1
The time to study or pay a visit to the material or internet sites we have linked to below.
0
0
active directory = Domain Admin (says “domain user” above…that’s not correct)
Office 365 = Global Admin
1
0
To create user accounts in a domain environment, ” Account Operators ” or higher is required.
The authority to create user accounts in the Office 365 environment requires ” User Management Admin ” or higher.
There is no Group named ” Domain Admin ” and ” Schema Admin “
0
0
Confused about this question… why does the account have to be an Admin account? If it doesn’t then it surely is fine to have the account authenticating as a Domain User in both.
But if they want an actual role/permission to be assigned then I would say the following:
The key thing is this part of the question: “granting the minimum permissions required”.
The first 3 (Domain User, Schema Admin & Account Operators) are all types of security groups that Domain users can be part of, and the last 2 are Office 365 specific roles. But ‘Domain users’ is the default type of AD account that is assigned to an AD user upon account creation. Therefore Domain users is the minimum permission, as it has no other special privileges other than access to the domain.
For Office 365, A ‘Global Administration’ has access to everything, whereas a ‘User Management Admin’ only has access to reset standard user accounts (not admins) manage standard user accounts and view the service health.
So answer for this question is as follows:
Active Directory = Domain User
Office 365 = User Management Admin
0
1