You have an Azure AD tenant. You plan to implement Azure AD Privileged Identity Management (PIM). Which roles can you manage by using PIM?

The correct answer is B. Global Administrator and Security Administrator only. You can manage just-in-time assignments to all Microsoft Entra roles and all Azure roles using Privileged Identity Management (PIM) in Microsoft Entra ID. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Submitted by noor.lb· Mar 6, 2026Plan and implement identity governance

Question

Options

AGlobal Administrator only
BGlobal Administrator and Security Administrator only
CGlobal Administrator, Security Administrator, and Security Contributor only
DAccount Administrator, Global Administrator, Security Administrator, and Security Contributor only

How the community answered

(25 responses)

A
8% (2)
B
72% (18)
C
16% (4)
D
4% (1)

Explanation

You can manage just-in-time assignments to all Microsoft Entra roles and all Azure roles using Privileged Identity Management (PIM) in Microsoft Entra ID. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Topics

#PIM#Privileged Identity Management#Azure AD roles#role management

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice