You have an Azure subscription named Sub1 that contains a user named User1. You need to ensure that User1 can purchase a Microsoft Entra Permissions Management license for Sub1. The solution must…

Question

Options

• AGlobal Administrator
• BBilling Administrator
• CPermissions Management Administrator
• DUser Access Administrator

• A
  10% (4)
• B
  74% (31)
• C
  2% (1)
• D
  14% (6)

Explanation

Billing Administrator is the correct role because it grants the specific permissions needed to make purchases, manage licenses, and handle billing tasks within Azure - which is exactly what's required to purchase a Microsoft Entra Permissions Management license. This role follows the principle of least privilege by granting only the billing-related capabilities User1 needs, without elevating them to broader administrative powers.

Why the distractors are wrong:

• Global Administrator (A) can certainly purchase licenses, but it grants sweeping control over the entire Azure AD tenant, violating least privilege.
• Permissions Management Administrator (C) manages configurations and settings within Microsoft Entra Permissions Management after it's already been deployed - it has no purchasing or billing authority.
• User Access Administrator (D) manages role assignments and access to Azure resources, but has no billing or licensing purchase capabilities.

Memory Tip: Think of it this way - if you need to buy something in Azure, you need a Billing role, just like in real life you'd give someone a company credit card (billing access), not the master key to the entire building (Global Admin). When you see "purchase" or "license acquisition" in an exam question, Billing Administrator should immediately come to mind.

No community discussion yet for this question.