You have an Azure subscription that contains a user named UseR1. You need to ensure that UseR1 can perform the following tasks:
• Create groups.
• Create access reviews for role-assignable groups.
• Assign Azure AD roles to groups.
The solution must use the principle of least privilege. Which role should you assign to User1?

Question

You have an Azure subscription that contains a user named UseR1. You need to ensure that UseR1 can perform the following tasks:

• Create groups.

• Create access reviews for role-assignable groups.

• Assign Azure AD roles to groups.

The solution must use the principle of least privilege. Which role should you assign to User1?

Wilco Gent · Accepted Answer

Identity Governance Administrator

Wilco Gent · Answer

Groups administrator

Wilco Gent · Answer

Authentication administrator

Wilco Gent · Answer

Privileged role administrator

List of questions