nerdexam
Microsoft

AZ-500 · Question #394

You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. You plan to enable passwordless authentication for the tenant. You need to ensure that User1 can enable the…

The correct answer is D. Global administrator. https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication- passwordless-deployment#required-roles Authentication Administrator can only implement and manage authentication methods, NOT implement combined registration experiences. User admin or…

Submitted by jian89· Mar 6, 2026Secure identity and access

Question

You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. You plan to enable passwordless authentication for the tenant. You need to ensure that User1 can enable the combined registration experience. The solution must use the principle of least privilege. Which role should you assign to User1?

Options

  • ASecurity administrator
  • BPrivileged role administrator
  • CAuthentication administrator
  • DGlobal administrator

How the community answered

(30 responses)
  • B
    7% (2)
  • C
    3% (1)
  • D
    90% (27)

Explanation

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication- passwordless-deployment#required-roles Authentication Administrator can only implement and manage authentication methods, NOT implement combined registration experiences. User admin or Global admin. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-registration-mfa-

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice