SC-300 Certification Practice Question #252

Question

You have a Microsoft 365 E5 subscription that contains a user named User1. User1 is eligible for the Application Administrator role.

User1 needs to configure a new connector group for an application proxy.

What should you use to activate the role for User1?

Accepted Answer

User1 is *eligible* for the Application Administrator role, which means the role must be activated just-in-time through Privileged Identity Management before it can be used. The "connector group for application proxy" detail is a distractor — what is asked is where to *activate* the role. MS Learn states role activation is performed by signing into the Microsoft Entra admin center (the rebranded Azure Active Directory admin center) and going to PIM > My roles. Suggested Answer, an effectively unanimous Most Voted (9), and two highly-upvoted comments all agree, and none of the other portals expose PIM role activation. Confidence is held just below the ceiling only because of the legacy "Azure Active Directory admin center" naming.

More SC-300 practice questions