Managing Modern Desktops (legacy) — Question 90

You have a Microsoft 365 subscription,
You need provide a user the ability to disable Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.
Which role should you assign to the user?

Answer options

• A. Global Administrator
• B. Conditional Access Administrator
• C. Security Administrator
• D. Intune Administrator

Correct answer: B

Explanation

The correct answer is B, the Conditional Access Administrator role, as it specifically allows users to manage Conditional Access policies and disable Security defaults. The Global Administrator (A) has broader permissions than necessary, while the Security Administrator (C) focuses on security tasks not related to Conditional Access, and the Intune Administrator (D) manages mobile devices and applications but does not handle Conditional Access policies.