You have three offices and an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You need to grant user management permissions to a local administrator in each office…

The correct answer is B. administrative units. Administrative units restrict permissions in a role to any portion of your organization that you define. You could, for example, use administrative units to delegate the Helpdesk Administrator role to regional support specialists, so they can manage users only in the region…

Submitted by amina.ke· Mar 4, 2026Manage Azure identities and governance

Question

You have three offices and an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You need to grant user management permissions to a local administrator in each office. What should you use?

Options

AAzure AD roles
Badministrative units
Caccess packages in Azure AD entitlement management
DAzure roles

How the community answered

(15 responses)

A
13% (2)
B
73% (11)
C
7% (1)
D
7% (1)

Explanation

Administrative units restrict permissions in a role to any portion of your organization that you define. You could, for example, use administrative units to delegate the Helpdesk Administrator role to regional support specialists, so they can manage users only in the region that they https://docs.microsoft.com/en-us/azure/active-directory/roles/administrative-units

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice