SC-300 Certification Practice Question #248

Question

You have an Azure subscription that contains the users shown in the following table.

You need to implement Azure AD Privileged Identity Management (PIM).

Which users can use PIM to activate their role permissions?

Accepted Answer

From the table image: Admin1 = Account Administrator, Admin2 = Service Administrator, Admin3 = SharePoint Administrator. MS Learn's "Roles you can't manage in PIM" page explicitly lists Account Administrator, Service Administrator, and Co-Administrator (the classic subscription administrator roles) as unmanageable in PIM, while it confirms PIM supports Microsoft 365 directory roles including SharePoint Administrator. Therefore only Admin3 (SharePoint Administrator) can be made eligible and use PIM to activate role permissions. This is corroborated by an overwhelming, unanimous community vote (25) and the official Suggested Answer.

More SC-300 practice questions