Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

The Privileged role administrator role is specifically designed to manage Microsoft Entra (Azure AD) role assignments. A user in this role can grant, remove, and modify any Azure AD directory role for other users, including elevating them to Global Administrator, without receiving all of the permissions that the Global Administrator role itself provides.

• Global Administrator grants full control over all Microsoft Entra settings, which is more access than required.
• User Administrator can manage user accounts and groups but cannot assign most directory roles.
• Authentication Administrator manages user authentication methods and can reset MFA but cannot assign roles.
• Security Reader can view security settings only.

Therefore, assigning the Privileged role administrator role satisfies the scenario.