Question 11 of 17

Your organization has hired a new admin named John Gruber. Your manager has asked you to give John Gruber the ability to enable and configure Azure AD Privileged Identity Management. Your organization adheres to the principle of least privilege

What role should you assign to John Gruber?

Privileged role administrators can enable, configure, and manage the Azure AD Privileged Identity Management. Global admins can also but using the global admin roles would break the principle of least privilege.

https://www.gitbit.org/course/ms-500/learn/Creating-and-managing-admins-through-roles-7CpqFkPZU

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference?view=o365-worldwide#privileged-role-administrator