Microsoft Azure Administrator Associate AZ-104 Practice Question

Administrative units in Azure Entra ID allow you to delegate permissions to regional or departmental administrators without granting them access to the entire directory. By using administrative units, you can scope administrative tasks to specific groups of users or other resources, enabling department-level admins to manage their own department's users and groups securely. Azure Entra ID groups are primarily used for assigning permissions to applications or resources, but they do not provide the scope restriction needed for administrative delegation. Azure subscriptions and resource groups are used for organizing and managing Azure resources, not for delegating Azure Entra ID administrative permissions.