You have a Microsoft 365 E5 subscription that contains a user named User1. You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principle of least priv

The correct answer is C. User administrator. To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. To create access reviews for Azure AD roles, you must be assigned to the Global Administrator or the Privileged Role Administrator role.

Submitted by sofia.br· Mar 6, 2026Plan and implement identity governance

Question

You have a Microsoft 365 E5 subscription that contains a user named User1. You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principle of least privilege. Which role should you assign to User1?

Options

APrivileged role administrator
BIdentity Governance Administrator
CUser administrator
DUser Access Administrator

How the community answered

(30 responses)

A
7% (2)
B
3% (1)
C
77% (23)
D
13% (4)

Explanation

To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. To create access reviews for Azure AD roles, you must be assigned to the Global Administrator or the Privileged Role Administrator role. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim- create-roles-and-resource-roles-review#prerequisites

Topics

#access reviews#PIM#least privilege#Azure AD roles

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice