Understanding Azure Global Administrator Role
Introduction
Azure Global Administrator Role: As the administrator for contoso.com, you created an Azure tenant named contoso.onmicrosoft.com. Later, you decided that Anne, a user on your team, should oversee contoso.onmicrosoft.com. You logged in to contoso.onmicrosoft.com and created a user account for Anne, making her a Global Administrator.
Scenario
You are the administrator for contoso.com. You create an Azure tenant named contoso.onmicrosoft.com. Later, you decide that Anne, a user on your team, should oversee contoso.onmicrosoft.com. You log in to contoso.onmicrosoft.com and create a user account for Anne. You make Anne a Global Administrator. Which of the following is true, now that Anne is a Global Administrator? Select one of the options.
Options
A. Both you and Anne are Global Administrators.
B. Before Anne leaves the company or takes a new role, she must assign someone else to be a Global Administrator.
C. Because Anne has been assigned the role of Global Administrator, she automatically becomes the Service Administrator.
Correct Answer
Final answer: Both you and Anne are now Global Administrators of the contoso.onmicrosoft.com tenant within Azure, which gives you both the highest level of permissions. So option 'A' is the correct answer. Anne's role assignment doesn't automatically make her a Service Administrator. There's no requirement for Anne to assign a new Global Administrator before leaving.
Explanation
The correct option would be A. Both you and Anne are Global Administrators. As a Global Administrator, Anne now has equivalent access and management rights as you do within the contoso.onmicrosoft.com tenant. She can manage all aspects of the Azure environment, including users, groups, resources, and billing. This does not, however, automatically make her the Service Administrator, so option C is incorrect. While it's good practice for a departing Global Administrator to ensure there's a replacement, there's no system-enforced requirement for Anne to assign her role to someone else before she leaves, making option B incorrect as well.
You are the administrator for contoso.com. You create an Azure tenant named contoso.onmicrosoft.com. Later, you decide that Anne, a user on your team, should oversee contoso.onmicrosoft.com. You log in to contoso.onmicrosoft.com and create a user account for Anne. You make Anne a Global Administrator. Which of the following is true, now that Anne is a Global Administrator? Select one of the options. Both you and Anne are now Global Administrators of the contoso.onmicrosoft.com tenant within Azure, which gives you both the highest level of permissions. So option 'A' is the correct answer. Anne's role assignment doesn't automatically make her a Service Administrator. There's no requirement for Anne to assign a new Global Administrator before leaving.