Question

A company wants to allow a help desk employee to reset passwords and manage authentication methods for users, but they should not be able to manage groups, applications, or other administrative settings. Which approach best follows the principle of least privilege in Microsoft Entra ID?

Accepted Answer

Assign the employee the built-in Helpdesk Administrator role

Answer

Assign the employee the Global Administrator role

Answer

Assign the employee the User Administrator role

Answer

Add the employee as an Owner of the tenant subscription