AVD Per-user Access Pricing for External Users

AZ-140 By islever Editorial Last updated

Plan and implement security

Short answer

C Assign a Microsoft 365 F3 license to each Fabrikam user to enable per-user access pricing.

Question

You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription. The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses. Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named App1. You need to configure access to App1. The solution must meet the following requirements: • The Fabrikam users must be licensed by using Per-user access pricing. • App1 must be accessible to all the internal and Fabrikam users. • Costs must be minimized. What should you do first?
  1. Add the Fabrikam users to the application group that contains App1.
  2. Add a new host pool to Sub1.
  3. Assign a Microsoft 365 F3 license to each Fabrikam user. Correct Answer
  4. Add a new host pool to a new subscription.

Key Takeaways

Access rights in AVD are contingent on valid licensing; you must license external users with Microsoft 365 F3 before adding them to application groups.

This question tests the configuration of Azure Virtual Desktop access policies for external users under per-user pricing. The correct first step is to assign the appropriate license before granting access.

Common mistake: Many learners choose A, believing that adding users to the app group is the primary administrative step, ignoring the prerequisite licensing requirement for external tenants.

Expert Analysis

Why the Answer Is Correct

The correct answer is C. To use Per-user access pricing for external (guest) users in Azure Virtual Desktop, they must have a valid Microsoft 365 F3 license assigned. This license allows them to sign in and access resources without requiring an Azure AD Premium P1/P2 license or a separate Azure subscription for licensing management. Since the Fabrikam users currently have no licenses, assigning the M365 F3 license is the mandatory first step to enable their access.

Why the Other Options Are Wrong

Option A is incorrect because adding users to an application group grants access rights but does not satisfy the licensing requirement; unlicensed users cannot authenticate or access the RemoteApp under per-user pricing. Option B and D are incorrect because creating new host pools or subscriptions adds unnecessary infrastructure complexity and cost, violating the requirement to minimize costs. The existing subscription and host pool can support external users if proper licensing is applied.

Community Comment Notes

Community sentiment was split between A and D. Several users incorrectly argued that a new subscription (D) was needed to isolate licensing, as noted by user sKostas who stated 'The per-user license need to be configured at the subscription level,' which is a misunderstanding of how M365 F3 works across tenants. Others confidently selected A, such as jeff1988 and Bonesurfer, focusing only on access control while overlooking the licensing prerequisite.

Exam Strategy

Always check licensing prerequisites for external users in AVD questions. If the scenario mentions 'Per-user pricing' and 'external/guest users', look for Microsoft 365 F3 assignment as a key step before configuring access permissions.

Frequently Asked Questions

Why not add users to the app group first?

Access groups grant permission but do not provide the necessary license for authentication and billing under per-user pricing.

Do I need Azure AD Premium for external users?

No, Microsoft 365 F3 licenses allow guest users to access AVD resources without needing Azure AD Premium P1 or P2.

More AZ-140 FAQ →

Community Votes

A
67%
D
33%

67% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors, not of islever. The comments shown first are the most substantive of the thread — ranked by depth, community endorsement and relevance; expand the list below to read the rest.

From public community threads 6

  1. jeff1988 👍 4 Answered A
    To meet the requirements of licensing Fabrikam users with Per-user access pricing and ensuring that App1 is accessible to both internal and Fabrikam users while minimizing costs, you should first add the Fabrikam users to the application group that contains App1. This step ensures that the users have access to the application. So, the correct answer is: A. Add the Fabrikam users to the application group that contains App1
  2. Bonesurfer 👍 3
    Correct Answer is A To meet all the requirements, including minimizing costs, add the Fabrikam users to the application group that contains App1. This will provide them access through per-user access pricing without incurring additional license or infrastructure costs.
  3. sKostas 👍 3 Answered D
    The per-user license need to be configured at the subscription level. The subscription is already having users with E5 license so you will need to create another subscription.
  4. Darkphoenix126 👍 2 Answered A
    According to Copilot: First thing you should do is A. Add the Fabrikam users to the application group that contains App1. By doing this, you can then configure the necessary licensing for the Fabrikam users under per-user access pricing. This approach ensures that both internal and external users can access App1 without creating new host pools or increasing unnecessary costs.
  5. RV3472 👍 1 Answered D
    New subscription is needed to activate per-user licensing
Show 1 more comment
  1. Bonifacef 👍 2 Answered A
    answer is A

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Which Storage Accounts Can Host FSLogix Profile Containers?

S-grade

First Step for AVD Reauthentication in New Subscription

S-grade

Does the Owner Role Let Admin1 Assign Scaling1 to Pool1?

S-grade

Adding Server2 to an AVD Host Pool: Which Two Actions?

S-grade

Practice All AZ-140 Questions

Access 64 questions with complete answers and detailed explanations.

View Full AZ-140 Practice Test →

← Back to AZ-140 Study Guide