SC-300 Practice Question 3423
Exam: SC-300
Domain: Implement and manage user identities
Difficulty: medium
You need to delegate permissions to an employee to manage memberships of all security groups in the directory without allowing them to create new groups or reset user passwords. Which role follows least privilege?
Answer Options
A
Groups Administrator
B
Global Administrator
C
User Administrator
D
Security Operator
Correct Answer
A: Groups Administrator
Explanation
The Groups Administrator role allows managing group settings and memberships for existing security and Microsoft 365 groups without full User Administrator scope.