MS-102 - Deploy and Manage a Microsoft 365 Tenant (30% of the exam) - Section 1.2

Manage users, contacts, and licenses in Microsoft 365.

Manage user accounts, guest users, and contacts within a Microsoft 365 tenant, including bulk creation and attribute editing. Apply license assignment directly or through group-based licensing, and distinguish when each approach is appropriate.

user accountsguest userscontactslicense assignmentgroup-based licensing

Practice question for this objective

Free sampleDeploy and Manage a Microsoft 365 Tenantmedium

Where must administrators perform license assignment in Microsoft 365 after the September 1, 2024 change?

  • AMicrosoft Entra admin center UI
  • BMicrosoft 365 admin center UI Correct
  • CAzure portal Cost Management
  • DOffice.com Apps launcher
UI for license assignment now lives in the Microsoft 365 admin center; API and PowerShell still work. The licensing-groups-resolve-problems note confirms that, as of September 1, 2024, license assignment UI moved to the Microsoft 365 Admin Center; API and PowerShell remain available.

Why A is wrong: Entra admin center UI no longer supports license assignment after the cutoff.

Why B is correct: Correct. The licensing-groups-resolve-problems note confirms that, as of September 1, 2024, license assignment UI moved to the Microsoft 365 Admin Center; API and PowerShell remain available.

Why C is wrong: Cost Management does not assign Microsoft 365 licenses.

Why D is wrong: Office.com is the user app launcher, not an admin surface.

See more MS-102 practice questions, answers explained.

Exam traps in Deploy and Manage a Microsoft 365 Tenant

Answers that look right on this material and are not. Each one is a distractor from a different question in the MS-102 bank for this domain.

  • Global Administrator

    Why it is wrong: Global Administrator includes billing but also grants full tenant control, violating least privilege.

  • The role deactivates immediately and the Microsoft Entra audit log records the deactivation timestamp event.

    Why it is wrong: PIM blocks deactivation within five minutes of activation; the deactivation will not succeed at the two-minute mark.

  • PIM removes the eligible assignment normally and prompts a Privileged Role Administrator to assign a replacement.

    Why it is wrong: If removing the last Global Administrator assignment, PIM blocks the removal to prevent lockout; this rule applies to eligible assignments as well as active ones.

Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.