Exam AZ-500 topic 9 question 1 discussion

Global Administration rights required. I was thinking MFA, but then the question does not mention MFA, or MFA status it only mentions user 2 has Security Administrator Role. So obviously if User2 needs to implement PIM, PIM needs to be enabled, and it requires Global Administrator role.

I think Correct Answer is A. This is is the Exam

On test 5/24/2023. This was my Case Study and there were 5 questions. Know this topic well.

Global Administration rights required.

A is the answer. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-deployment-plan#assign-and-activate-azure-ad-roles For Azure AD roles in PIM, only a user who is in the Privileged Role Administrator or Global Administrator role can manage assignments for other administrators. Global Administrators, Security Administrators, Global Readers, and Security Readers can also view assignments to Azure AD roles in PIM.

A. Assign User2 the Global administrator role.

in exam Oct. 31st.

In Exam 10/18/2022. One case study(6 ques), no lab.

# In Exam 01-Oct-2022

#exam ques # 29 Sep

## Exam Question - 17 Sept 2021 ##

Exam 17 August 2021

Global Admin is the correct answer. Its not horribly clear but this article has the answer on how to deploy PIM. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-deployment-plan "Only owners of subscriptions and management groups can bring these resources under management by Privileged Identity Management. After it is under management, the PIM functionality is available for owners at all levels including management group, subscription, resource group, and resource. If you're a Global Administrator trying to deploy Privileged Identity Management for your Azure resources, you can elevate access to manage all Azure subscriptions to give yourself access to all Azure resources in the directory for discovery. "

On exam, May 2021. This is a scenario that contains multiple (less than 5) questions.

answer is correct. When you are first configuring PIM you will need Global Admin rights within Microsoft Azure. The first user to enable and configure PIM will automatically be assigned the Privileged Role Administrators and Security Administrators role groups.

In order to activate PIM, you need to consent to PIM which requires a Global Admin to do so. Once you do so, it will automatically prompt you for MFA thus making the answer A.

Answer is A, Global Administrator required to implement PIM as user2 was Security Administrator