Microsoft 365 Administrator Expert MS-102 Practice Question
Your Microsoft 365 tenant uses Microsoft Entra ID Privileged Identity Management (PIM). You need to delegate ongoing responsibility for approving role activation requests, creating custom Azure AD roles, and configuring the settings of PIM itself. The delegated administrator must have the least possible privileges and must not gain full control over all Microsoft 365 services. Which built-in Microsoft Entra role should you assign to the administrator?
The Privileged role administrator role is designed for managing Microsoft Entra ID roles. Holders can create and edit custom roles, assign or remove Azure AD roles, and administer PIM-including approving or denying activation requests and configuring PIM settings. Global administrator also has these capabilities but grants full control over the tenant, violating the least-privilege requirement. User administrator and Security administrator do not have permissions to manage role assignments, create custom roles, or administer PIM.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra ID Privileged Identity Management (PIM)?
Open an interactive chat with Bash
What permissions does the Privileged Role Administrator role have?
Open an interactive chat with Bash
Why is Global Administrator not suitable in this scenario?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .