Question

Your company uses a Microsoft Entra ID security group named Sales-Team to control access to several SharePoint sites. The IT manager wants two members of the sales department to be able to add and remove members from the group without granting them any directory-wide administrative permissions. What should you configure to meet this requirement with the least privilege?

Accepted Answer

Add the two users as owners of the Sales-Team group.

Answer

Assign the two users the Groups Administrator role in Microsoft Entra ID.

Answer

Assign the two users the User Administrator role scoped to an administrative unit.

Answer

Convert Sales-Team to a dynamic membership group and add the users as members.