Question

Your company has multiple departments and one azure subscription. The user accounts for all employees are in the same Microsoft Azure tenant. You need to delegate permissions for the users in a single department only. What should you use to organize the user accounts?

1) Azure Active Directory
2) Azure Resource Manager
3) Azure Virtual Network
4) Azure Storage

Answer 1

To delegate permissions for users in a single department, you should use Azure Active Directory. Azure AD allows you to create groups and assign necessary permissions, ensuring only those in the department have the correct access rights.

Step-by-step explanation:

To organize the user accounts for users in a single department within the same Microsoft Azure tenant and delegate permissions accordingly, you should use Azure Active Directory (Azure AD). Azure AD is a cloud-based identity and access management service which allows for granular control over user access, including the ability to create and manage groups, assign roles, and delegate permissions based on departmental needs.

With Azure AD, you can group the users from the specific department into a security group or distribution list and assign the necessary permissions to this group, ensuring that only members of this group have the access they require. Azure AD provides comprehensive tools for identity and access management that are essential for maintaining security and compliance in your organization.