You plan to deploy an Office 365 tenant to multiple offices around the country.
You need to modify the users and groups who are authorized to administer the Rights Management
service.
Which Windows PowerShell cmdlet should you run?
A.
Add-MsolGroupMember
B.
Get-AadrmRoleBasedAdministrator
C.
Remove-AadrmRoleBasedAdministrator
D.
Enable-AadrmSuperUserFeature
Answer should be C: https://docs.microsoft.com/en-us/information-protection/deploy-use/administer-powershell
you need to modify..dosent say, you need to remove…maybe get-addrmkrolebasedadministrator ?
C
Manage users and groups who are authorized to administer the Rights Management service for your organization.
Add-AadrmRoleBasedAdministrator
Get-AadrmRoleBasedAdministrator
Remove-AadrmRoleBasedAdministrator
Whatever A not right.
I prefer B, get correct users information and then modify them.
Correct answer is C
I’m torn between C and D because the “Remove-AadrmRoleBasedAdministrator” will only allow you to remove, I guess removing is still classified as ‘Modify’ and so would meet the requirements of the question.
You need a role assigned not a group so not A.
The Super User Feature will also allow you to give users or groups permissions to RMS, if you ran Enable-AadrmSuperUserFeature you could then assign and remove those rights.
https://docs.microsoft.com/en-us/information-protection/deploy-use/configure-super-users