When creating a new Delegated Administrator with a custom scope, the Full Administrator role is NOT available because the scope __________.

When creating a new Delegated Administrator with a custom scope, the Full Administrator role is NOT available because the scope __________.

• A. created did NOT contain all the required objects
• B. must use the Read Only role
• C. was created with the hosting object selected
• D. cannot use the Full Administrator role

Answer: (D)

The key idea is that a custom scope limits what an admin can manage. The Full Administrator role provides unrestricted, global access across the entire environment, which conflicts with a scoped, limited view. Because the scope is restricted, that global role isn’t available for a delegated administrator with a custom scope. You’d instead choose roles appropriate to the defined scope (for example, a scoped admin with limited permissions). The other options aren’t the mechanism here—the restriction is the incompatibility of a global role with a scoped scope.

The key idea is that a custom scope limits what an admin can manage. The Full Administrator role provides unrestricted, global access across the entire environment, which conflicts with a scoped, limited view. Because the scope is restricted, that global role isn’t available for a delegated administrator with a custom scope. You’d instead choose roles appropriate to the defined scope (for example, a scoped admin with limited permissions). The other options aren’t the mechanism here—the restriction is the incompatibility of a global role with a scoped scope.