Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

The Password Administrator role (sometimes referred to as Helpdesk Administrator) lets its members reset passwords for non-administrator users and certain lower-privilege admins, but it does not grant broader directory permissions such as creating users or managing groups. User Administrator and Global Administrator both include many additional privileges that exceed the requirement, while Groups Administrator does not provide password reset capability. Therefore, assigning the Password Administrator role meets the need to permit password resets only.