Home » Microsoft » MS-500 v.2 » Which of the following role assignments can approve a valid Azure Privileged Identity Management request?
Which of the following role assignments can approve a valid Azure Privileged Identity Management request? (Choose two.)
A. Global administrator
B. Privileged Role Administrator
C. Security Administrator
D. Privileged Authentication Administrator
E. Owner
Correct Answer: AB
Explanation/Reference:
Only Global Administrator and Privileged Role Administrator can approve PIM requests.
Privileged authentication administrator is not a PIM-related role.
The Azure resource role of Owner can not approve PIM requests.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/azure-ad-pim-approval-workflow https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles
