SC-300 Certification Practice Question #251

Question

You have an Azure AD tenant.

You plan to implement Azure AD Privileged Identity Management (PIM).

Which roles can you manage by using PIM?

Accepted Answer

PIM manages all Microsoft Entra roles and all Azure roles, with the only exclusions being the classic subscription administrator roles (Account Administrator, Service Administrator, Co-Administrator). Both Global Administrator and Security Administrator are real Entra roles and are therefore PIM-manageable, eliminating option A. The other options rely on a "Security Contributor" role that multiple commenters confirmed does not exist in the portal's role lists, and option D additionally includes Account Administrator, a classic role PIM cannot manage. Given the four offered choices, only B contains exclusively valid PIM-manageable roles. The Suggested Answer and a strong 33-vote majority back B; confidence is set at 80 rather than higher because a meaningful "Highly Voted" C contingent persists, though it is based on a non-existent role and is overruled by MS Learn.

More SC-300 practice questions