GSEC · Question #337
Which of the following is Azure's version of a superuser?
The correct answer is B. Global administrator. The Global Administrator is the highest-privilege role in Azure Active Directory, granting unrestricted control over the entire tenant - equivalent to a superuser.
Question
Which of the following is Azure's version of a superuser?
Options
- ANetwork administrator
- BGlobal administrator
- CSecurity administrator
- DIntune administrator
How the community answered
(23 responses)- A13% (3)
- B78% (18)
- C4% (1)
- D4% (1)
Why each option
The Global Administrator is the highest-privilege role in Azure Active Directory, granting unrestricted control over the entire tenant - equivalent to a superuser.
Network Administrator manages virtual networks and related resources only, not tenant-wide identity and access management.
Global Administrator is the top-level Azure AD role that has full permissions over all Azure AD features, all Microsoft 365 services, and can assign any other admin role. No other built-in role can override or restrict a Global Administrator. This makes it the functional equivalent of a root or superuser account in traditional operating systems.
Security Administrator can manage security policies, alerts, and Defender settings, but cannot control all Azure AD tenant functions or assign other admin roles.
Intune Administrator manages mobile device management and application deployment in Intune only, with no broader tenant-level authority.
Concept tested: Azure AD Global Administrator role and superuser privileges
Source: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator
Topics
Community Discussion
No community discussion yet for this question.