SC-300 Certification Practice Question #246

Question

You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM).

You need to identify users that are eligible for the Cloud Application Administrator role.

Which blade in the Privileged Identity Management settings should you use?

Accepted Answer

Cloud Application Administrator is a built-in Microsoft Entra (Azure AD) directory role. In PIM, the **Microsoft Entra roles** blade (labeled "Azure AD roles" in older portal UI, and simply "Roles" in newer UI) is the dashboard that lists each directory role with its eligible and active assignments, so it is the place to identify users *eligible* for that role. MS Learn's PIM navigation table explicitly maps this blade to managing Microsoft Entra role assignments, matching the unanimous Suggested + Most Voted choice. Confidence is just below the ceiling only because the portal has since renamed the blade, but the underlying answer is unchanged.

More SC-300 practice questions