Microsoft Azure Security Technologies (AZ-500)

To implement Azure AD Privileged Identity Management (PIM), which role should be assigned to a specified user?

1. The Global administrator role

2. The Security administrator role

3. The Password administrator role

4. The Compliance administrator role

The correct answer is: The Global administrator role

To implement Azure AD Privileged Identity Management (PIM), the role that should be assigned to a specified user is the Global administrator role. The Global administrator role is the highest level of administrative privilege in Azure Active Directory, and it has the ability to manage all aspects of Azure AD, including overseeing roles and delegating permissions to other users. Being a Global administrator allows the user not only to provision and manage PIM but also to assign and manage roles effectively across the Azure AD environment. This role is particularly essential because PIM includes functionalities such as role activation, scheduling, and reviewing role assignments, which require elevated permissions that only a Global administrator can provide. The other roles listed, while they have their importance within Azure AD, do not have the full scope of permissions needed to manage PIM effectively. The Security administrator can manage security-related features but lacks the comprehensive administrative authority; the Password administrator can reset passwords but does not encompass broader role management; and the Compliance administrator focuses on compliance tasks without the necessary administrative capabilities to implement or manage PIM functions. Therefore, the Global administrator role is crucial for effective PIM implementation.