SC-300 Question #270: Real Exam Question with Answer & Explanation

The correct answer is B: Global Administrator and Security Administrator only. You can manage just-in-time assignments to all Microsoft Entra roles and all Azure roles using Privileged Identity Management (PIM) in Microsoft Entra ID. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Submitted by noor.lb· Mar 6, 2026

Question

You have an Azure AD tenant. You plan to implement Azure AD Privileged Identity Management (PIM). Which roles can you manage by using PIM?

Options

AGlobal Administrator only
BGlobal Administrator and Security Administrator only
CGlobal Administrator, Security Administrator, and Security Contributor only
DAccount Administrator, Global Administrator, Security Administrator, and Security Contributor only

Explanation

You can manage just-in-time assignments to all Microsoft Entra roles and all Azure roles using Privileged Identity Management (PIM) in Microsoft Entra ID. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice Browse All SC-300 Questions