Microsoft Azure Administrator Associate AZ-104 Practice Question

Administrative Units in Azure Entra ID allow you to delegate administrative permissions to specific subsets of users or groups within your organization, such as by department or region. By using Administrative Units, you can assign administrators to manage only the users and groups within a particular Administrative Unit, without giving them broader access to other resources in Azure Entra ID. Other features like Azure Entra ID Privileged Identity Management, Management Groups, and Role-Based Access Control (RBAC) do not provide the necessary scope limitation at the department level within Azure AD user and group management.