Managing Users, licenses, guests, contacts

Question 1

Creating users with Windows PowerShell

Answer 1

$PasswordProfile = @{ Password = ‘User.pw1’ }
New-MgUser –UserPrincipalName AllanD@Adatum.onmicrosoft.com –DisplayName ‘Allan Deyoung’ – GivenName ‘Allan’ –Surname ‘Deyoung’ -PasswordProfile $PasswordProfile -AccountEnabled -MailNickName ‘AllanD’

Question 2

Import multiple users

Answer 2

This option provides a method for the bulk importation of multiple users into the Microsoft 365 admin center through a comma-separated value (CSV) file.

Question 3

What roles can assign or remove licenses

Answer 3

Microsoft 365 Global admin and User Management admin roles

Question 4

How long is the grace period for recovering user information after it has been deleted?

Answer 4

30 Days

Question 5

To view the number of licenses remaining in m365 admin center

Answer 5

In the Microsoft 365 admin center, on the left-hand navigation pane, select Billing and then select Licenses.

In the Subscriptions tab, note how many licenses are available for each subscription and how many licenses the organization assigned.

Question 6

To view unlicensed users in M365 admin center

Answer 6

In the Microsoft 365 admin center, on the left-hand navigation pane, select Users and then select Active users.

In the menu bar, select Filter.

In the drop-down menu that appears, note all the various options that you can select to view the users with these respective properties. To view unlicensed users, select Unlicensed users.

Question 7

Finding unlicensed accounts using Microsoft Graph PowerShell

Answer 7

Get-MgUser -Filter ‘assignedLicenses/$count eq 0’ -ConsistencyLevel eventual -CountVariable unlicensedUserCount -All

Question 8

Assigning licenses to user accounts with Powershell

Answer 8

Set-MgUserLicense -UserId $userUPN -AddLicenses @{SkuId = “<SkuId>"} -RemoveLicenses @()</SkuId>

Question 9

Deleting a user account in powershell

Answer 9

Remove-MgUser -UserId ‘5c442efb-5e66-484a-936a-91b6810bed14’

Question 10

Restore a deleted user account powershell

Answer 10

Restore-MgDirectoryDeletedItem -DirectoryObjectId ‘5c442efb-5e66-484a-936a-91b6810bed14’

Question 11

Organizations should complete the following steps to bulk create users in Microsoft Entra ID:

Answer 11

In the Microsoft Entra admin center, select Users, and then select All users.

On the Users page, select Bulk operations on the menu bar. In the drop-down menu that appears, select Bulk create.

In the Bulk create users pane that appears, select Download to receive a comma-separated values (CSV) file of user properties. Use this file as a template and add users you want to create.

Question 12

How to Check status of your bulk operations

Answer 12

On the Users page, under the Manage section in the middle navigation pane, select Bulk operation results.

Question 13

Verify users with PowerShell

Answer 13

Get-MgUser -Filter “UserType eq ‘Member’”

Question 14

B2B collaboration

Answer 14

securely share your company’s applications and services with external users, while maintaining control over your own corporate data.

With B2B collaboration, an external user is invited to sign in to your Microsoft Entra organization using their own credentials.

Question 15

B2B collaboration user

Answer 15

an external user is invited to sign in to your Microsoft Entra organization using their own credentials. This B2B collaboration user can then access the apps and resources you want to share with them. A user object is created for the B2B collaboration user in the same directory as your employees.

Question 16

External guest.

Answer 16

user has an account in an external Microsoft Entra organization or an external identity provider (such as a social identity), They also have guest-level permissions in the resource organization. The user object created in the resource Microsoft Entra directory has a UserType of Guest.

Question 17

External member

Answer 17

This B2B collaboration user has an account in an external Microsoft Entra organization or an external identity provider (such as a social identity) and member-level access to resources in your organization.

Question 18

Internal guest.

Answer 18

setting up internal credentials for them and designating them as guests by setting the user object UserType to Guest.

Question 19

Internal member.

Answer 19

These users are generally considered employees of your organization. The user authenticates internally through Microsoft Entra ID, and the user object created in the resource Microsoft Entra directory has a UserType of Member.

Question 20

Roles that can create guest users

Answer 20

Global Administrator role or a limited administrator directory role, such as a Guest Inviter or User Administrator.

Question 21

To view guest users in the Microsoft 365 admin center,

Answer 21

expand Users in the left-hand navigation pane and then select Guest users.

Question 22

User Principal Name (UPN)

Answer 22

The UPN for a B2B collaboration user object contains a #EXT# identifier.

Question 23

User type.

Answer 23

UserType property indicates the relationship of the user to the host tenancy. This property can have two values:

Member. This value indicates an employee of the host organization and a user in the organization’s payroll. For example, this user expects to have access to internal-only sites. This user isn’t considered an external collaborator.

Guest. This value indicates a user who isn’t considered internal to the company, such as an external collaborator, partner, or customer. Such a user isn’t expected to receive a chief executive officer (CEO)’s internal memo or receive company benefits, for example.

Question 24

Permission level: restricted access

Answer 24

they can view only their own user profile. They don’t have permission to view other users, even if the guest searches by User Principal Name or objectId. Restricted access also restricts guest users from seeing the membership of groups they’re in.

Question 25

Specify who can invite guests.

Answer 25

By default, all users in your organization, including B2B collaboration guest users, can invite guest users to B2B collaboration. If you want to limit the ability to send invitations, you can turn invitations on or off for everyone, or limit invitations to certain roles.

Question 26

update guest access permissions in Microsoft Entra ID, perform the following steps:

Answer 26

Sign into Microsoft 365 as a Global Administrator or a user with a limited administrator directory role or the Guest Inviter role. On the Microsoft 365 admin center, select Show All in the navigation pane. Under the Admin centers group in the navigation pane, select Identity. In the Microsoft Entra admin center, in the left-hand navigation pane, select Users, and then select User settings. On the User | User settings page, under the External users section towards the bottom of the page, select the Manage external collaboration settings link. On the External collaboration settings page, update each of the available settings to meet your organization's requirements.

Question 27

Do guest user invitations expire

Answer 27

No

Question 28

Add guests in Microsoft Entra ID

Answer 28

Under the Admin centers group in the navigation pane, select Identity. In the Microsoft Entra admin center, in the left-hand navigation pane, select Users, and then select All users. On the Users window, select +New user on the menu bar. In the drop-down menu that appears, select Invite external user. On the Invite external user page, under the Basics tab, enter the guest user's Email address and Display name. You can optionally send an invitation message, which you can also enter here, along with the email address of a recipient you wish to CC. You can optionally select the Properties tab to enter the external user's full name and job information. You can also select the Assignments tab to assign the external user to existing groups, or to add security roles to the user account.

Question 29

Add guest users to a group

Answer 29

Under the Admin centers group in the navigation pane, select Identity. In the Microsoft Entra admin center, in the left-hand navigation pane, select Groups, and then select All groups. Select a group (or select New group in the menu bar to create a new one). It's a good idea to include in the group description that the group contains B2B guest users. In the group window that appears, under the Manage section in the middle pane, select Members. Select +Add members. Perform one of the following steps: If the guest user is already in Microsoft Entra ID*:* On the Add members page, start typing the name or email address of the guest user. In the search results, choose the user, and then choose Select. If the guest user isn't currently in Microsoft Entra ID*:* On the Add members page, type the user's full email address in the search box, type a Personal message (optional), and then choose Invite to send an invitation. Choose Select. Now add the user to the group. On the Members page, choose Add members. Type the user's name or email address in the search box, choose the user in the results, and

Question 30

B2B external collaboration settings

Answer 30

Sign in to Microsoft Entra ID at https://entra.microsoft.com/. In the left navigation pane, expand External identities. Select External collaboration settings.

Question 31

Perform the following steps to set Microsoft 365 Groups guest settings:

Answer 31

In the Microsoft 365 admin center, in the left navigation pane, expand Settings. Select Org settings. In the list of organizations settings, select Microsoft 365 Groups.

Question 32

Perform the following steps to set SharePoint organization-level sharing settings:

Answer 32

In the SharePoint admin center, in the left navigation pane, under Policies, select Sharing. In the External sharing window, you can set the sharing settings for both SharePoint and OneDrive. Ensure that the external sharing option for SharePoint is set to Anyone or New and existing guests. If you made changes, select Save.

Question 33

Perform the following steps to set Sharepoint site-level sharing settings:

Answer 33

In the SharePoint admin center, in the left navigation pane, expand Sites and then select Active sites. Select the site for the team that you created. On the Settings tab, select More sharing settings. Ensure that sharing is set to Anyone or New and existing guests.

Question 34

Contacts

Answer 34

people outside of your organization that you would like everyone to be able to find. You can use these contacts for sending emails to these external parties.

Question 35

Permissions needed to create mail contacts

Answer 35

Exchange Administrator. Members of this role can create Contacts using the EAC and the Microsoft 365 admin center. Directory Writers. These individuals can create Contacts using the Microsoft 365 admin center.

Question 36

Create a contact using the Microsoft 365 admin center

Answer 36

In the Microsoft 365 admin center, select Users in the navigation pane, and then select Contacts. In the Contacts window, select Add a contact on the menu bar. In the Add a contact pane that appears, update the following fields. The system requires settings marked with an *.

Question 37

Remove a contact using the Microsoft 365 admin center

Answer 37

In the Microsoft 365 admin center, select Users in the navigation pane, and then select Contacts. Select the check box next to the contact that you want to delete. Select the Delete contact option in the menu bar.