Microsoft Identity and Access Administrator — Question 60

You have a Microsoft 365 E5 subscription that contains a user named User1.

You need to ensure that User1 can create access reviews for Microsoft Entra roles. The solution must use the principle of least privilege.

Which role should you assign to User1?

Answer options

• A. Identity Governance Administrator
• B. User Access Administrator
• C. User Administrator
• D. Privileged Role Administrator

Correct answer: D

Explanation

The correct answer is D, Privileged Role Administrator, as this role has the necessary permissions to manage role assignments and create access reviews for Microsoft Entra roles. The other roles, such as Identity Governance Administrator, User Access Administrator, and User Administrator, do not provide the same level of access required for creating access reviews.