SC-300 Practice Question 3442
Exam: SC-300
Domain: Implement authentication and access management
Difficulty: medium
Which built-in role in Microsoft Entra ID can create, modify, and delete Conditional Access policies without granting full Global Administrator rights?
Answer Options
A
Conditional Access Administrator
B
User Administrator
C
Compliance Administrator
D
Helpdesk Administrator
Correct Answer
A: Conditional Access Administrator
Explanation
The Conditional Access Administrator role grants permissions to configure and administer Conditional Access policies, named locations, and custom controls.