The correct answer is Entra ID.

Entra ID is Microsofts identity and access management service for Azure tenants and directories. Administrators use it to create and manage users, groups, and roles and to control membership of tenant groups. To add a team member to an existing tenant group you perform the action in Entra ID because that is where directory users and group memberships are managed.

Entra ID is the current name for the service that was commonly called Azure Active Directory. You may still see the older name in study materials and in some portal references, but the function is the same and newer exams will refer to Entra ID.

Cloud Identity is a Google Cloud identity product and not the service used to manage Azure tenant users. It is not used to add members to an Azure tenant group.

Azure Resource Manager manages deployment and organization of Azure resources and templates and it does not manage directory users or group membership. Identity tasks such as adding users to groups are done in Entra ID.

Azure DevOps is focused on source control, pipelines, and project collaboration and it does not provide tenant wide identity management for adding users to groups. That responsibility belongs to Entra ID.

Full AWS Practitioner Certification Question