A project team adds and removes contractors every few weeks. The team needs Azure access to follow membership changes without updating role assignments for each person. What should the administrator use to delegate the access?

Assign the Azure role directly to each contractor user account.

Direct user assignments work, but every membership change requires another role change. That creates more administrative effort and a higher risk of missed access removal.

Use a Microsoft 365 group and assign the Azure role to it.

Microsoft 365 groups are mainly for collaboration scenarios. They are not the preferred choice for Azure access delegation when a security group is the clearer, more appropriate administrative construct.

Create a management group for the contractors and assign the role there.

Management groups are used to organize subscriptions and apply governance at scale. They are not meant to represent a temporary project team or manage individual contractor membership.

What does this AZ-104 question test?

Read the scenario before looking for a memorised answer.

What is the correct answer to this question?

The correct answer is: Create a Microsoft Entra security group, add the contractors, and assign the Azure role to the group. — A Microsoft Entra security group lets the administrator separate identity membership from the permission assignment. The Azure role is assigned once to the group, and access is then controlled by adding or removing users from that group. This reduces repeated RBAC changes and avoids stale permissions when contractors join or leave. It is the most practical and scalable choice for frequently changing team access. Why others are wrong: Assigning the role to each user creates repeated maintenance work and makes offboarding easier to miss. A Microsoft 365 group is not the best fit for Azure RBAC delegation in this scenario. A management group is for subscription organization and governance, not for representing a project team or contractor roster.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.