Microsoft 365 Administrator Expert MS-102 Practice Question

The Helpdesk Administrator role permits password resets for non-administrator accounts but not for privileged roles. When the role is scoped to an administrative unit, holders can act only on objects in that unit. Assigning Helpdesk Administrator scoped to SalesAU therefore provides the exact capability required-password resets for sales users only-with no broader privileges.

Password Administrator can also reset passwords for several administrator roles, which exceeds the requirement. Authentication Administrator can update multifactor and passwordless settings in addition to performing password resets, providing unnecessary permissions. User Administrator grants broad user management capabilities (create, update, delete users) that are not needed in this scenario.