Microsoft Azure Administrator Associate AZ-104 Practice Question

Administrative units in Azure Entra ID allow you to delegate administrative permissions to specific subsets of users. By creating administrative units for each department and assigning roles scoped to those units, you can ensure that administrators have permissions only over users in their department. Azure AD Privileged Identity Management helps manage privileged roles but does not scope permissions to specific subsets of users. Conditional Access Policies control access conditions but do not delegate administrative permissions. Security groups are useful for grouping users but do not restrict administrative scope for role assignments.