You have a Microsoft 365 E5 subscription that contains a user named User1. You need to ensure that User1 can create access reviews for Microsoft Entra roles. The solution must use the principle of…

Question

Options

• AIdentity Governance Administrator
• BUser Access Administrator
• CUser Administrator
• DPrivileged Role Administrator

• A
  18% (5)
• B
  7% (2)
• C
  4% (1)
• D
  71% (20)

Explanation

Explanation

Privileged Role Administrator (D) is correct because this role grants the specific permission needed to create and manage access reviews for Microsoft Entra (Azure AD) privileged roles, making it the least privileged option that fulfills this exact requirement - it is purpose-built for governing role assignments and their review lifecycle.

Identity Governance Administrator (A) can manage access reviews for groups and applications, but it does not have the authority to create access reviews specifically scoped to Microsoft Entra roles - that distinction is key and a common exam trap. User Access Administrator (B) is an Azure RBAC role (not an Entra/Azure AD role) focused on managing resource-level access in Azure, and is irrelevant here. User Administrator (C) manages user accounts and licenses but has no authority over privileged role reviews or governance tasks.

Memory Tip: Think "Privileged Role = Privileged Role Administrator." Whenever the task involves reviewing or governing Entra role assignments, the Privileged Role Administrator is your go-to. Don't confuse Identity Governance Administrator - it covers governance broadly, but not Entra role-specific access reviews.

No community discussion yet for this question.