You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. You need to ensure that User1 can create and manage administrative units. The solution must use the principle…

The Privileged role administrator role allows a user to manage administrative units, including creating, deleting, and updating them. This role provides the necessary permissions specifically for administrative unit management without granting broader, unnecessary privileges, thereby adhering to the principle of least privilege.

The Helpdesk administrator role is primarily for resetting passwords and managing service requests, not for creating and managing administrative units.

The Global administrator role grants unrestricted access to all administrative features in Azure AD, violating the principle of least privilege for managing only administrative units.

The Security administrator role provides permissions to manage security-related features, such as security information and reports, but does not include the ability to manage administrative units.